Skip to content

Commit 525d30f

Browse files
committed
use alternate repository for trivy vulnerabilities database in Publish workflow
1 parent aac03db commit 525d30f

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/publish.yml

+3
Original file line numberDiff line numberDiff line change
@@ -151,6 +151,9 @@ jobs:
151151

152152
- name: Scan ${{ matrix.image }} for vulnerabilities
153153
uses: aquasecurity/trivy-action@0.24.0
154+
env:
155+
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
156+
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
154157
with:
155158
image-ref: ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ matrix.image }}:develop
156159
ignore-unfixed: true

0 commit comments

Comments
 (0)