Add Trivy database repositories to vulnerability scanner workflows

More info at: ballerina-platform/ballerina-library#7357 that fixes: aquasecurity/trivy-action#389
mjanez · Nov 13, 2024 · 9448619 · 9448619
1 parent c1139e2
commit 9448619
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
@@ -82,6 +82,9 @@ jobs:
 
       - name: Run Trivy container image vulnerability scanner
         uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
+          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db
         with:
           image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.VERSION }}
           format: sarif

diff --git a/.github/workflows/docker-manual.yml b/.github/workflows/docker-manual.yml
@@ -72,6 +72,9 @@ jobs:
 
       - name: Run Trivy container image vulnerability scanner
         uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
+          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db
         with:
           image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.VERSION }}
           format: sarif