From 92d5171f1f0412c9f90bb3aa7d9d4133a5f6efbd Mon Sep 17 00:00:00 2001 From: Jesus Date: Sun, 13 Oct 2024 02:15:33 +0800 Subject: .gitea: set Trivy DB from AWS --- .gitea/workflows/release.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml index 779bb90..6222f62 100644 --- a/.gitea/workflows/release.yaml +++ b/.gitea/workflows/release.yaml @@ -49,7 +49,7 @@ jobs: rusian/gitolite-cgit:latest - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master + uses: aquasecurity/trivy-action@0.27.0 with: image-ref: rusian/gitolite-cgit:latest format: 'table' @@ -57,6 +57,11 @@ jobs: ignore-unfixed: true vuln-type: 'os' severity: 'CRITICAL,HIGH' + env: + TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2 + TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 + TRIVY_SKIP_DB_UPDATE: false + TRIVY_SKIP_JAVA_DB_UPDATE: false - name: Push Docker image uses: docker/build-push-action@v6 -- cgit v1.2.3