search

aquasecurity / trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
Apache License 2.0
795 stars 230 forks source link

Floating v0 tag #224

Open yogeshlonkar opened 1 year ago

yogeshlonkar commented 1 year ago

Could you please add floating v0 tag which points to latest release from v0.x.x as per github action versioning recommendations.

Will be really helpful as we have workflows in multiple repositories that uses this action

yogeshlonkar commented 1 year ago

Is there any chance this can be addressed? I would be happy to contribute to workflow file but seems releases are done manually.

By the way it works even if you just set vX.Y.Z as tag, GitHub detects which is latest vX, I couldn't find the documentation around it but it works as I have tested it with other repositories. So just adding v prefix to tags will resolve this issue

askpatrickw commented 3 months ago

This would be great. A lot of churn to merge dependabot PRs for this until its done.

askpatrickw commented 3 months ago

You can see how the GitHub team manages this process in this workflow.

https://github.com/actions/download-artifact/blob/v4/.github/workflows/release-new-action-version.yml