fix: repoint Trivy to use ECR mirror

Signed-off-by: James Ramirez <[email protected]>
grendel-consulting · Nov 1, 2024 · f1c6af0 · f1c6af0
1 parent 5b584e1
commit f1c6af0
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/speculative-plan.yaml b/.github/workflows/speculative-plan.yaml
@@ -79,7 +79,6 @@ jobs:
       security-events: write
 
     env:
-      trivy_sarif: trivy.sarif
 
     steps:
       - name: Harden Runner
@@ -98,6 +97,9 @@ jobs:
           scan-type: "fs"
           format: "sarif"
           output: ${{ env.trivy_sarif }}
+        env:
+          TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db"
+          TRIVY_JAVA_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-java-db"
 
       - name: Report via GitHub CodeQL
         uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0