Fix Trivy scan failure

jimsihk · Nov 2, 2024 · fcdaabc · fcdaabc
1 parent 593d408
commit fcdaabc
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -84,6 +84,8 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
           exit-code: 0
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
@@ -29,6 +29,8 @@ jobs:
           image-ref: ${{ env.IMAGE }}
           format: 'sarif'
           output: 'trivy-results.sarif'
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3

diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml
@@ -49,6 +49,8 @@ jobs:
           format: 'table'
           severity: 'CRITICAL,HIGH'
           exit-code: 0
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
 
       - name: Run the Anchore scan action for PR
         uses: anchore/scan-action@v5