use ECR DB when scanning repo with Trivy

Sage-Bionetworks · Nov 7, 2024 · b5ee9b3 · b5ee9b3
1 parent 77a17af
commit b5ee9b3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/scan-repo.yml b/.github/workflows/scan-repo.yml
@@ -19,6 +19,9 @@ jobs:
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
         with:
           scan-type: 'fs'
           ignore-unfixed: true