From 64d62375b98e7367f6a4910f61f545ce58b47779 Mon Sep 17 00:00:00 2001 From: Seunghun Lee Date: Mon, 2 Mar 2026 09:35:25 +0000 Subject: [PATCH] Bump Trivy to 0.69.2 Trivy had security incident on 1st March 2026 [1], resulting losing all GitHub Releases between 0.27.0-0.69.1. They then restored the latest as 0.69.2 [1] https://github.com/aquasecurity/trivy/discussions/10265 (cherry picked from commit 9144c9f7e2ad95b72bceb8aeb96d5eacb3c8b8ec) --- .github/workflows/stackhpc-container-image-build.yml | 2 +- tools/scan-images.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/stackhpc-container-image-build.yml b/.github/workflows/stackhpc-container-image-build.yml index 5fe5c97102..473e14f417 100644 --- a/.github/workflows/stackhpc-container-image-build.yml +++ b/.github/workflows/stackhpc-container-image-build.yml @@ -142,7 +142,7 @@ jobs: - name: Install Trivy run: | - curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sudo sh -s -- -b /usr/local/bin v0.49.0 + curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sudo sh -s -- -b /usr/local/bin v0.69.2 - name: Install Kayobe run: | diff --git a/tools/scan-images.sh b/tools/scan-images.sh index 7fe4f95ad4..b3bbfe6663 100755 --- a/tools/scan-images.sh +++ b/tools/scan-images.sh @@ -11,7 +11,7 @@ set -u # Check that trivy is installed if ! trivy --version; then - echo 'Please install trivy: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.49.1' + echo 'Please install trivy: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.69.2' fi # Clear any previous outputs