codecov[bot]
commented
2 years ago Codecov Report
Merging #118 (969c56f) into master (00d3c10) will decrease coverage by
0.30%. The diff coverage isn/a.
@@ Coverage Diff @@
## master #118 +/- ##
==========================================
- Coverage 42.11% 41.81% -0.31%
==========================================
Files 32 32
Lines 1325 1325
==========================================
- Hits 558 554 -4
- Misses 732 737 +5
+ Partials 35 34 -1 | Impacted Files | Coverage Δ | |
|---|---|---|
| internal/tpl/render.go | 72.18% <0.00%> (-3.01%) |
:arrow_down: |
Continue to review full report at Codecov.
Legend - Click here to learn more
Δ = absolute <relative> (impact),ø = not affected,? = missing dataPowered by Codecov. Last update 00d3c10...969c56f. Read the comment docs.
Bumps aquasecurity/trivy-action from 0.3.0 to 0.5.1.
Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
0105373docs(trivy): Add instructions to scan tarballs. (#134)bc615aefix(tests): Update test golden files for Trivy v0.29.2 (#136)7b7aa26feat(SBOM): Support SBOM generation (#129)63b6e4cdocs: added missing HTML template and removed deprecated SARIF template (#132)49e970dchore: pinning 0.29.0 trivy (#128)c666240Add missing option to README. (#127)e276058feat: update codeql-action/upload-sarif to v2 (#124)2b22459Update tests for 0.28.1 and convert to JSON (#126)4b3b5f9Add support for --ignorefile option (.trivyignore) (#122)1a53202Use AWS public ECR instead of rate-limiting dockerhub (#118)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)