ci(deps): bump aquasecurity/trivy-action from 0.2.2 to 0.7.1

[dependabot[bot]]

Bumps aquasecurity/trivy-action from 0.2.2 to 0.7.1.

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.7.1

What's Changed

• Fix github dependency submission API call by @​chejn in aquasecurity/trivy-action#162

New Contributors

• @​chejn made their first contribution in aquasecurity/trivy-action#162

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.7.0...0.7.1

v0.7.0

What's Changed

• docs: correct format and add output on config scan with sarif by @​dirien in aquasecurity/trivy-action#159
• feat(trivy): Bump Trivy to v0.31.2 by @​simar7 in aquasecurity/trivy-action#165

New Contributors

• @​dirien made their first contribution in aquasecurity/trivy-action#159

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.6.2...0.7.0

v0.6.2

What's Changed

• fix(config): Drop mixing of options with yaml config. by @​simar7 in aquasecurity/trivy-action#148
• chore: improve message output sbom with gh by @​krol3 in aquasecurity/trivy-action#145
• fix(sarif): Add timeout and security-checks for sarif by @​simar7 in aquasecurity/trivy-action#156

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.6.1...0.6.2

v0.6.1

What's Changed

• chore(deps): Update trivy version by @​simar7 in aquasecurity/trivy-action#152

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.6.0...0.6.1

v0.6.0

What's Changed 🔥

• feat(yaml): Add support for trivy.yaml by @​simar7 in aquasecurity/trivy-action#143
• Updated to use Trivy v0.30.2

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.5.1...0.6.0

v0.5.1

What's Changed

• fix(tests): Update test golden files for Trivy v0.29.2 by @​simar7 in aquasecurity/trivy-action#136
• docs(trivy): Add instructions to scan tarballs. by @​simar7 in aquasecurity/trivy-action#134

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.5.0...0.5.1

... (truncated)

Commits

• d63413b Fix github dependency submission API call (#162)
• 1db49f5 feat(trivy): Bump Trivy to v0.31.0 (#165)
• 12814ff docs: correct format and add output on config scan with sarif (#159)
• cb606df fix(sarif): Add timeout and security-checks for sarif (#156)
• 0d7cf2d chore: improve message output sbom with gh (#145)
• 5144f05 fix(config): Drop mixing of options with yaml config. (#148)
• 81b9a6f Update Dockerfile (#152)
• 503d3ab feat(yaml): Add support for trivy.yaml (#143)
• 0105373 docs(trivy): Add instructions to scan tarballs. (#134)
• bc615ae fix(tests): Update test golden files for Trivy v0.29.2 (#136)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)