willemjan/glucose-dashboard
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Pin trivy-action to last docker-based release #5

Merged
willemjan merged 1 commits from dev into main 2026-07-26 12:54:59 +00:00
Conversation 0 Commits 1 Files Changed 1
+12 -6
willemjan commented 2026-07-26 12:54:53 +00:00
Owner
Copy Link
Copy Source

aquasecurity/trivy-action@master installeert Trivy nu via een setup-trivy composite-action die actions/checkout met een GitHub-token doet; dat faalt op act_runner met Input required and not supplied: token, ook met een lege token. v0.25.0 is de laatste versie die als losstaande Docker-image draait en heeft dat probleem niet.

aquasecurity/trivy-action@master installeert Trivy nu via een setup-trivy composite-action die actions/checkout met een GitHub-token doet; dat faalt op act_runner met Input required and not supplied: token, ook met een lege token. v0.25.0 is de laatste versie die als losstaande Docker-image draait en heeft dat probleem niet.
willemjan added 1 commit 2026-07-26 12:54:53 +00:00
pin trivy-action to the last docker-based release 7379f6be8c 
@master resolves to a version that installs Trivy via a nested
setup-trivy composite action, which does an actions/checkout against
github.com with a token. On Gitea's act_runner that fails with "Input
required and not supplied: token" even when the token is explicitly
set to an empty string (act_runner doesn't distinguish empty from
unset). v0.26.0 introduced that composite/setup-trivy split; v0.25.0
is the last release that ships as a self-contained Docker image with
Trivy already baked in, so it needs no token at all.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
willemjan merged commit 10aa315e40 into main 2026-07-26 12:54:59 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
jenkins renovate-bot willemjan
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: willemjan/glucose-dashboard#5