cve-differential/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "customManagers": [
    {
      "customType": "regex",
      "fileMatch": [
        "^action\\.ya?ml$"
      ],
      "matchStrings": [
        "TRIVY_VERSION:\\s*(?<currentValue>[0-9]+\\.[0-9]+\\.[0-9]+)\\s*#\\s*trivy-version"
      ],
      "depNameTemplate": "aquasecurity/trivy",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver"
    }
  ],
  "packageRules": [
    {
      "matchDatasources": [
        "github-releases"
      ],
      "matchPackageNames": [
        "aquasecurity/trivy"
      ],
      "postUpgradeTasks": {
        "commands": [
          "curl -sfL https://github.com/aquasecurity/trivy/releases/download/v{{{newVersion}}}/trivy_{{{newVersion}}}_checksums.txt -o checksums.txt"
        ],
        "fileFilters": [
          "checksums.txt"
        ],
        "executionMode": "update"
      }
    }
  ]
}