diff --git a/.github/workflows/speculative-plan.yaml b/.github/workflows/speculative-plan.yaml index 0e01019..06ea5cf 100644 --- a/.github/workflows/speculative-plan.yaml +++ b/.github/workflows/speculative-plan.yaml @@ -79,7 +79,6 @@ jobs: security-events: write env: - trivy_sarif: trivy.sarif steps: - name: Harden Runner @@ -98,6 +97,9 @@ jobs: scan-type: "fs" format: "sarif" output: ${{ env.trivy_sarif }} + env: + TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db" + TRIVY_JAVA_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-java-db" - name: Report via GitHub CodeQL uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0