Merge pull request #1614 from NASA-AMMOS/dev/alternate-trivy-db

use alternate repository for trivy vulnerabilities DB in Publish workflow

Author: dandelany

.github/workflows/publish.yml

@@ -151,6 +151,9 @@ jobs:
 
       - name: Scan ${{ matrix.image }} for vulnerabilities
         uses: aquasecurity/trivy-action@0.24.0
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
         with:
           image-ref: ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ matrix.image }}:develop
           ignore-unfixed: true