chore: use public ecr registry for downloading trivy databases (#69)

hypertrace · Nov 12, 2024 · a5e4e44 · a5e4e44
1 parent 8f41043
commit a5e4e44
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/trivy-image-scan/action.yml b/trivy-image-scan/action.yml
@@ -98,6 +98,9 @@ runs:
         timeout: ${{ inputs.timeout }}
         limit-severities-for-sarif: true
         exit-code: '1'
+      env:
+        TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
+        TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
 
     - name: Rerun Trivy vulnerability scanner with logging
       if: failure() && inputs.output-mode != 'log'
@@ -111,6 +114,9 @@ runs:
         ignore-unfixed: ${{ inputs.ignore-unfixed }}
         timeout: ${{ inputs.timeout }}
         exit-code: '1'
+      env:
+        TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
+        TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
 
     - name: Upload Trivy scan results to GitHub Security tab
       uses: github/codeql-action/upload-sarif@v2