From f3a9ba2c9d0b106fbe543e2cf103b5ff2af7e572 Mon Sep 17 00:00:00 2001
From: Chen Cao <chen.cao@verkada.com>
Date: Fri, 20 Mar 2026 17:35:09 -0700
Subject: [PATCH] Pin trivy-action to 0.35.0 (commit 57a97c7e) for Trivy
 v0.69.3

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/trivy.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index bfc9646a65..b57f17aa19 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -41,6 +41,7 @@ jobs:
       - name: Build trivy
         run: |
           git clone https://github.com/aquasecurity/trivy-action.git /tmp/trivy-action
+          cd /tmp/trivy-action && git checkout 57a97c7e7821a5776cebc9bb87c984fa69cba8f1
           sudo docker build -t d6f297:4714451b1eca4e41a4cc10f0a8a8c25a -f "/tmp/trivy-action/Dockerfile" "/tmp/trivy-action/"
 
       - name: Run Trivy vulnerability scanner on EMBA image