fix(cron): pin ubuntu-24.04 runner and use installed (bump to v1.2.…

…0) `oras` version (#450)

.github/workflows/cron.yml

@@ -11,7 +11,7 @@ env:
 jobs:
   build:
     name: Build DB
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Maximize build space
         uses: easimon/maximize-build-space@v10
@@ -74,9 +74,8 @@ jobs:
 
       - name: Install oras
         run: |
-          # upgrade to ORAS 1.0.0
-          curl -LO https://github.com/oras-project/oras/releases/download/v1.0.0/oras_1.0.0_linux_amd64.tar.gz
-          tar -xvf ./oras_1.0.0_linux_amd64.tar.gz
+          curl -LO https://github.com/oras-project/oras/releases/download/v1.2.0/oras_1.2.0_linux_amd64.tar.gz
+          tar -xvf ./oras_1.2.0_linux_amd64.tar.gz
 
 
       - name: Upload assets to registries
@@ -107,7 +106,7 @@ jobs:
             for tag in "${tags[@]}"; do
               echo "Pushing artifact with tag: ${tag}"
           
-              if oras push --artifact-type application/vnd.aquasec.trivy.config.v1+json \
+              if ./oras push --artifact-type application/vnd.aquasec.trivy.config.v1+json \
                 "${full_registry_url}:${tag}" \
                 db.tar.gz:application/vnd.aquasec.trivy.db.layer.v1.tar+gzip; then
                 echo "Successfully pushed to ${full_registry_url}:${tag}"