build(deps): add trivy-version input for specifying Trivy CLI version

Author: ergousha

README.md

@@ -296,6 +296,7 @@ and a [.golangci.yml](https://golangci-lint.run/usage/configuration/).
 | token                                           |         |          | GitHub token for authentication (typically ${{ secrets.GITHUB_TOKEN }})                                          |
 | trivy-action-db                                 | x       |          | Trivy vulnerability database configuration                                                                       |
 | trivy-action-java-db                            | x       |          | Trivy Java vulnerability database configuration                                                                  |
+| trivy-version                                   | x       |          | Trivy CLI version used by aquasecurity/trivy-action (for example, "v0.69.2")                                    |
 
 
 Note: If an **x** is registered in the Default column, refer to the

action.yml

@@ -95,6 +95,10 @@ inputs:
     default: "public.ecr.aws/aquasecurity/trivy-java-db:1"
     description: |
       OCI repository to retrieve trivy-java-db from.
+  trivy-version:
+    default: "v0.69.2"
+    description: |
+      The Trivy CLI version used by aquasecurity/trivy-action.
 runs:
   using: "composite"
   steps:
@@ -209,6 +213,7 @@ runs:
       with:
         scan-type: "fs"
         scan-ref: "."
+        version: ${{ inputs.trivy-version }}
         exit-code: "1"
         ignore-unfixed: true
         severity: "CRITICAL,HIGH"
@@ -221,6 +226,7 @@ runs:
       with:
         scan-type: "fs"
         scan-ref: "."
+        version: ${{ inputs.trivy-version }}
         exit-code: "1"
         ignore-unfixed: true
         severity: "CRITICAL,HIGH"