From 56979d991233fd94bc43ff9917aaba1c20c505e9 Mon Sep 17 00:00:00 2001
From: embeddevio <embeddev.iot@gmail.com>
Date: Wed, 28 Oct 2026 22:21:04 +0300
Subject: [PATCH] =?UTF-8?q?ci(verify):=20trivy=20=D0=B8=D0=B7=20=D1=80?=
 =?UTF-8?q?=D0=B5=D0=BB=D0=B8=D0=B7=D0=BD=D0=BE=D0=B3=D0=BE=20tarball,=20?=
 =?UTF-8?q?=D0=B2=D0=B5=D1=80=D1=81=D0=B8=D1=8F=200.76.1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Refs #17
---
 .gitea/workflows/ci.yml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 33d69aa..2e48d22 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -245,13 +245,16 @@ jobs:
     if: needs.lint.outputs.has_dockerfile == 'true'
     runs-on: ubuntu-latest
     env:
-      TRIVY_VERSION: "0.57.1"
+      TRIVY_VERSION: "0.76.1"
       TRIVY_SEVERITY: "HIGH,CRITICAL"
     steps:
       - name: install trivy
         run: |
-          curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \
-            | sh -s -- -b /usr/local/bin "v${TRIVY_VERSION}"
+          set -euo pipefail
+          curl -fsSL -o /tmp/trivy.tar.gz \
+            "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
+          tar -xzf /tmp/trivy.tar.gz -C /usr/local/bin trivy
+          chmod +x /usr/local/bin/trivy
           trivy --version
 
       - name: "trivy image (HIGH/CRITICAL -> fail)"