From fa16aa422e00150e3a1c6497605c7f7ac175e8c9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Nov 2026 12:15:03 +0000
Subject: [PATCH] Bump aquasecurity/trivy-action

Bumps the github-actions group with 1 update: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action).


Updates `aquasecurity/trivy-action` from 8f28faec26515256b6d22074d1d2a8986f4cbd87 to 38b337fff0a2f984d5be173c99e3f633438167ec
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/8f28faec26515256b6d22074d1d2a8986f4cbd87...38b337fff0a2f984d5be173c99e3f633438167ec)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 38b337fff0a2f984d5be173c99e3f633438167ec
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/container-scan.yml | 2 +-
 .github/workflows/main.yml           | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml
index c8013b5..2e23680 100644
--- a/.github/workflows/container-scan.yml
+++ b/.github/workflows/container-scan.yml
@@ -23,7 +23,7 @@ jobs:
           echo "version=$(cat VERSION)" >> $GITHUB_OUTPUT
 
       - name: Run Trivy
-        uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master
+        uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master
         env:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
         with:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ce9fc13..327c698 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -87,7 +87,7 @@ jobs:
             GOLANG_VERSION=${{ steps.get-go-version.outputs.version }}
 
       - name: Run Trivy
-        uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master
+        uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master
         env:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
         with: