From 26b4243178099f73c06053af6f78bd7d8c023220 Mon Sep 17 00:00:00 2001
From: Derek Nola <derek.nola@suse.com>
Date: Wed, 12 Feb 2025 09:35:35 -0800
Subject: [PATCH] Only bump trivy on the minor release (#11773)

Signed-off-by: Derek Nola <derek.nola@suse.com>
---
 updatecli/updatecli.d/trivy.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/updatecli/updatecli.d/trivy.yaml b/updatecli/updatecli.d/trivy.yaml
index f6fae4055322..ddab63f11394 100644
--- a/updatecli/updatecli.d/trivy.yaml
+++ b/updatecli/updatecli.d/trivy.yaml
@@ -35,7 +35,8 @@ sources:
       repository: "trivy"
       token: "{{ requiredEnv .github.token }}"
       versionfilter:
-        kind: "latest"
+        kind: "regex"
+        pattern: "^v\\d+\\.\\d+$" # Matches "vMajor.Minor" only, skip patch
     transformers:
       - trimprefix: "v"