Skip to content

Commit

Permalink
github/workflows: use ECR mirror for Trivy's DB
Browse files Browse the repository at this point in the history
GitHub Container Registry is returning a TOOMANYREQUESTS error. Switch
to AWS ECR mirror, as suggested in
aquasecurity/trivy-action#389.

Signed-off-by: Ivan Valdes <ivan@vald.es>
  • Loading branch information
ivanvc authored and a-nych committed Oct 16, 2024
1 parent f1224b3 commit 289f1ab
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,11 @@ jobs:
severity: 'CRITICAL,HIGH'
format: 'sarif'
output: 'trivy-results-${{ matrix.platforms }}.sarif'
env:
# Use AWS' ECR mirror for the trivy-db image, as GitHub's Container
# Registry is returning a TOOMANYREQUESTS error.
# Ref: https://github.com/aquasecurity/trivy-action/issues/389
TRIVY_DB_REPOSITORY: 'public.ecr.aws/aquasecurity/trivy-db:2'
- name: upload scan results
uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
with:
Expand Down

0 comments on commit 289f1ab

Please sign in to comment.