.github/workflows/docker-scan.yml
@@ -37,7 +37,7 @@ matrix: tag: [ 'latest', 'alpine' ] steps: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Scan openidentityplatform/opendj:${{ matrix.tag }} (Trivy) # unlike the build.yml gate, unfixed CVEs are reported too: surfacing them in # already-released images is the point of this workflow