From e9e31edcb0a6bd9a9e1c562428ef30e97a3e3464 Mon Sep 17 00:00:00 2001
From: DmitriyLewen <dmitriy.lewen@smartforce.io>
Date: Thu, 24 Oct 2024 10:38:32 +0600
Subject: [PATCH] refactor: use `default: ${{ github.token }}` for
 `token-setup-trivy`

---
 action.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/action.yaml b/action.yaml
index ecf4217..e94a778 100644
--- a/action.yaml
+++ b/action.yaml
@@ -111,15 +111,18 @@ inputs:
     description: >
       `token-setup-trivy` is required when `github.token` in invalid for `https://github.com` server.
       See https://github.com/aquasecurity/setup-trivy/?tab=readme-ov-file#install-trivy-with-non-default-token for more details.
+      `token-setup-trivy` is only used to fetch the Trivy repository in `setup-trivy`
     required: false
-    default: ''
+    ## ${{ github.token }} is default value for actions/checkout
+    ## cf. https://github.com/actions/checkout/blob/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871/action.yml#L24
+    default: ${{ github.token }}
 
 runs:
   using: 'composite'
   steps:
     - name: Install Trivy
       if: ${{ inputs.skip-setup-trivy == 'false' }}
-      uses: DmitriyLewen/setup-trivy@2df9f605c29dbee29f7c66a8151e3b97f0874f5d
+      uses: DmitriyLewen/setup-trivy@34d9f0ee0ca364ca9f822843050fb1013babdb58
       with:
         version: ${{ inputs.version }}
         cache: ${{ inputs.cache }}