pin trivy version

northdpole · northdpole · commit 2df149c80b51 · 2025-08-28T21:12:49.000+01:00
diff --git a/components/scanners/trivy/README.md b/components/scanners/trivy/README.md
@@ -1,4 +1,4 @@
-# trivy
+# trivy v0.65.0 Scanner
 
 This component implements a [scanner](https://github.com/smithy-security/smithy/blob/main/sdk/component/component.go)
 that parses [sarif](https://sarifweb.azurewebsites.net/) reports output
diff --git a/components/scanners/trivy/scanner/Dockerfile b/components/scanners/trivy/scanner/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/aquasec/trivy:latest
+FROM docker.io/aquasec/trivy:0.65.0
 
 COPY ./entrypoint.sh /entrypoint.sh
 ENTRYPOINT [ "/bin/bash", "-c", "/bin/entrypoint.sh" ]

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# trivy`
	`1`	`+# trivy v0.65.0 Scanner`
`2`	`2`
`3`	`3`	`This component implements a [scanner](https://github.com/smithy-security/smithy/blob/main/sdk/component/component.go)`
`4`	`4`	`that parses [sarif](https://sarifweb.azurewebsites.net/) reports output`