[fix][ci] Pin aquasecurity/trivy-action@0.26.0 since master is broken (…

…#23431) (cherry picked from commit 3dc0ade)
apache · Oct 10, 2024 · a615780 · a615780
1 parent dd1a8c0
commit a615780
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/pulsar-ci.yaml b/.github/workflows/pulsar-ci.yaml
@@ -890,7 +890,7 @@ jobs:
         run: src/check-binary-license.sh ./distribution/server/target/apache-pulsar-*-bin.tar.gz && src/check-binary-license.sh ./distribution/shell/target/apache-pulsar-shell-*-bin.tar.gz
 
       - name: Run Trivy container scan
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.26.0
         if: ${{ github.repository == 'apache/pulsar' && github.event_name != 'pull_request' }}
         with:
           image-ref: "apachepulsar/pulsar:latest"