ci: use reachable Trivy database mirror

2026-10-15 23:23:22 +02:00
1 parent 56577d23b5
commit 26a8b076ba
@@ -136,7 +136,7 @@ jobs:
              run: /tmp/semgrep/bin/semgrep scan --config p/javascript --config p/typescript --metrics off --sarif --output semgrep-results.sarif src scripts
            - name: Dependency and secret scan
              if: ${{ !cancelled() }}
-              run: trivy fs --format sarif --output trivy-results.sarif --skip-dirs node_modules,dist,coverage .
+              run: trivy fs --db-repository public.ecr.aws/aquasecurity/trivy-db:2 --format sarif --output trivy-results.sarif --skip-dirs node_modules,dist,coverage .
            - name: Security reports
              if: ${{ always() }}
              uses: https://gitea.com/actions/upload-artifact@v3