From 294bdff0e38de6c91b0ab0f6afaad7a850631136 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 18:54:39 +0000
Subject: [PATCH] Bump aquasecurity/trivy-action from 0.28.0 to 0.36.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.28.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...v0.36.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/envia-a-docker.yaml  | 4 ++--
 .github/workflows/envia-a-packages.yml | 4 ++--
 .github/workflows/python-app-test.yml  | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/envia-a-docker.yaml b/.github/workflows/envia-a-docker.yaml
index 9e4668e..613d1ae 100644
--- a/.github/workflows/envia-a-docker.yaml
+++ b/.github/workflows/envia-a-docker.yaml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Trivy config scan
         # Bloquea el publish ante hallazgos de alta severidad.
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: config
           hide-progress: true
@@ -104,7 +104,7 @@ jobs:
         run: echo "IMAGE_REF=josechval/apiflask-demo@${{ steps.build_and_push.outputs.digest }}" >> "$GITHUB_ENV"
 
       - name: Trivy image scan
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ${{ env.IMAGE_REF }}
           format: table
diff --git a/.github/workflows/envia-a-packages.yml b/.github/workflows/envia-a-packages.yml
index a80c4e4..c2aba32 100644
--- a/.github/workflows/envia-a-packages.yml
+++ b/.github/workflows/envia-a-packages.yml
@@ -64,7 +64,7 @@ jobs:
 
       - name: Trivy config scan
         # Bloquea el publish ante hallazgos de alta severidad.
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: config
           hide-progress: true
@@ -110,7 +110,7 @@ jobs:
         run: echo "IMAGE_REF=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_and_push.outputs.digest }}" >> "$GITHUB_ENV"
 
       - name: Trivy image scan
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: ${{ env.IMAGE_REF }}
           format: table
diff --git a/.github/workflows/python-app-test.yml b/.github/workflows/python-app-test.yml
index 7ca3455..e58f0bf 100644
--- a/.github/workflows/python-app-test.yml
+++ b/.github/workflows/python-app-test.yml
@@ -93,7 +93,7 @@ jobs:
     - name: Escanear dependencias con Trivy (fs)
       # scan-type: fs analiza el proyecto completo incluyendo uv.lock para detectar
       # vulnerabilidades conocidas (CVEs) en las dependencias antes de construir la imagen.
-      uses: aquasecurity/trivy-action@0.28.0
+      uses: aquasecurity/trivy-action@v0.36.0
       with:
         scan-type: fs
         scan-ref: .