ci: use reachable Trivy database mirror

.gitea/workflows/ci.yml

@@ -136,7 +136,7 @@ jobs:
               run: /tmp/semgrep/bin/semgrep scan --config p/javascript --config p/typescript --metrics off --sarif --output semgrep-results.sarif src scripts
             - name: Dependency and secret scan
               if: ${{ !cancelled() }}
-              run: trivy fs --format sarif --output trivy-results.sarif --skip-dirs node_modules,dist,coverage .
+              run: trivy fs --db-repository public.ecr.aws/aquasecurity/trivy-db:2 --format sarif --output trivy-results.sarif --skip-dirs node_modules,dist,coverage .
             - name: Security reports
               if: ${{ always() }}
               uses: https://gitea.com/actions/upload-artifact@v3