diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 73242ff..49521d0 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -84,6 +84,8 @@ jobs: output: 'trivy-results.sarif' severity: 'CRITICAL,HIGH' exit-code: 0 + env: + TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 92f0d5d..7d4bc90 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -29,6 +29,8 @@ jobs: image-ref: ${{ env.IMAGE }} format: 'sarif' output: 'trivy-results.sarif' + env: + TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml index 9eb9cfe..61a8cd3 100644 --- a/.github/workflows/test-pr.yml +++ b/.github/workflows/test-pr.yml @@ -49,6 +49,8 @@ jobs: format: 'table' severity: 'CRITICAL,HIGH' exit-code: 0 + env: + TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db - name: Run the Anchore scan action for PR uses: anchore/scan-action@v5