Skip to content

Comments

UID2-6620: Upgrade aquasecurity/trivy-action from 0.14.0 to 0.34.0#2381

Open
sunnywu wants to merge 2 commits intomainfrom
syw-UID2-6620-upgrade-trivy-action
Open

UID2-6620: Upgrade aquasecurity/trivy-action from 0.14.0 to 0.34.0#2381
sunnywu wants to merge 2 commits intomainfrom
syw-UID2-6620-upgrade-trivy-action

Conversation

@sunnywu
Copy link
Contributor

@sunnywu sunnywu commented Feb 20, 2026

Summary

  • The Azure Private Operator Build Image job was failing because aquasecurity/[email protected] contains a Docker client using API version 1.43
  • The GitHub Actions runner's Docker daemon now requires a minimum API version of 1.44, causing the Trivy scan step to fail with: client version 1.43 is too old. Minimum supported API version is 1.44
  • Upgraded both trivy-action usages (SARIF report generation and vulnerability test) from 0.14.0 to 0.34.0

Test plan

  • Verify the Azure Private Operator / Build Image job passes the "Generate Trivy vulnerability scan report" step
  • Verify the "Test with Trivy vulnerability scanner" step also passes
  • Confirm the Docker image is successfully pushed after the scan

Fixes: https://github.com/IABTechLab/uid2-operator/actions/runs/22162906844/job/64083854196
Jira: https://thetradedesk.atlassian.net/browse/UID2-6620

🤖 Generated with Claude Code

sunnywu and others added 2 commits February 20, 2026 17:10
The Azure Private Operator Build Image job was failing because [email protected]
uses Docker client API version 1.43, which is incompatible with the runner's Docker
daemon that now requires a minimum API version of 1.44.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants