fix: Configure Trivy to use AWS public registry to avoid rate limits (#…

…449)
h2oai · Oct 29, 2024 · b7614bb · b7614bb
1 parent 95be0df
commit b7614bb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/component-scan.yml b/.github/workflows/component-scan.yml
@@ -30,6 +30,9 @@ jobs:
           format: 'json'
           vuln-type: 'os,library'
           output: 'trivy-results.json'
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
 
       - name: Save vulnerabilities report in tabular format
         if: always()