Use aws public trivy-db storage to avoid ratelimits on github

Endava · Nov 4, 2024 · 07c9b42 · 07c9b42
1 parent a6a38cd
commit 07c9b42
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
@@ -58,6 +58,8 @@ jobs:
 
       -   name: Run Alpine Trivy vulnerability scanner
           uses: aquasecurity/[email protected]
+          env:
+            TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'table'
@@ -68,6 +70,8 @@ jobs:
 
       -   name: Run Alpine Trivy vulnerability scanner and create html file
           uses: aquasecurity/[email protected]
+          env:
+            TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'template'
@@ -76,6 +80,8 @@ jobs:
 
       -   name: Run Alpine Trivy vulnerability scanner and create html file
           uses: aquasecurity/[email protected]
+          env:
+            TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'json'
@@ -93,6 +99,8 @@ jobs:
 
       -   name: Run Alpine Trivy vulnerability scanner and upload to github security tab
           uses: aquasecurity/[email protected]
+          env:
+            TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
           with:
             image-ref: php-${{ env.PHP_VERSION }}
             format: 'sarif'