From 67b831483a60fc60ffa44297408080b8620bc4b6 Mon Sep 17 00:00:00 2001
From: Derek Nola <derek.nola@suse.com>
Date: Mon, 10 Feb 2025 10:43:57 -0800
Subject: [PATCH] Only bump trivy on the minor release

Signed-off-by: Derek Nola <derek.nola@suse.com>
---
 updatecli/updatecli.d/trivy.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/updatecli/updatecli.d/trivy.yaml b/updatecli/updatecli.d/trivy.yaml
index f6fae4055322..ddab63f11394 100644
--- a/updatecli/updatecli.d/trivy.yaml
+++ b/updatecli/updatecli.d/trivy.yaml
@@ -35,7 +35,8 @@ sources:
       repository: "trivy"
       token: "{{ requiredEnv .github.token }}"
       versionfilter:
-        kind: "latest"
+        kind: "regex"
+        pattern: "^v\\d+\\.\\d+$" # Matches "vMajor.Minor" only, skip patch
     transformers:
       - trimprefix: "v"