diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml index 0bb79d7..84e6df1 100644 --- a/.github/workflows/docker.yaml +++ b/.github/workflows/docker.yaml @@ -47,18 +47,20 @@ jobs: --build-arg="PROJECT_DESCRIPTION=${PROJECT_DESCRIPTION}" . - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.26.0 + uses: aquasecurity/trivy-action@0.28.0 with: image-ref: 'ghcr.io/${{ github.repository }}:${{ env.TAG }}' format: 'template' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' severity: 'CRITICAL,HIGH' + continue-on-error: true - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 with: sarif_file: 'trivy-results.sarif' + continue-on-error: true - name: Push docker image to GHCR run: | diff --git a/CHANGELOG.md b/CHANGELOG.md index 1fa94de..26d7766 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,15 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/). +## v2.0.2 - 2024-10-23 +### What's Changed +**Full Changelog**: https://github.com/obervinov/_templates/compare/v2.0.1...v2.0.2 by @obervinov in https://github.com/obervinov/_templates/pull/98 +#### 🚀 Features +* bump dependency versions +#### 🐛 Bug Fixes +* set trivy job as not necessary (for fix `TOOMANYREQUESTS` error) + + ## v2.0.1 - 2024-10-10 ### What's Changed **Full Changelog**: https://github.com/obervinov/_templates/compare/v2.0.0...v2.0.1 by @obervinov in https://github.com/obervinov/_templates/pull/95 diff --git a/LICENSE b/LICENSE index fd8dba0..5c5ae4d 100644 --- a/LICENSE +++ b/LICENSE @@ -1,6 +1,6 @@ MIT License -Copyright (c) 2023 obervinov +Copyright (c) 2024 obervinov Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal diff --git a/SECURITY.md b/SECURITY.md index 31f58cb..16bd7dd 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,7 +6,8 @@ Versions supported to fix vulnerabilities | Version | Supported | | ------- | ------------------ | -| 1.x.x | :white_check_mark: | +| 2.x.x | :white_check_mark: | +| 1.x.x | :x: | ## Reporting a Vulnerability