Test new trivy db (#27)

* Test new trivy db * Test back without new db repo * Test new trivy db * Test envs * switch db repo * use correct trivy action :/ * switch db repo * Add new java trivy db too * Remove ref to branch
dBildungsplattform · Oct 29, 2024 · 0cb188a · 0cb188a
1 parent a5aceb8
commit 0cb188a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/check-trivy.yaml b/.github/workflows/check-trivy.yaml
@@ -50,6 +50,9 @@ jobs:
           severity: ${{ inputs.severity }}
           exit-code: ${{ inputs.fail_on_vulnerabilites && 1 || 0}}
           ignore-unfixed: ${{ inputs.ignore-unfixed }}
+        env:
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
 
       - name: Override location of findings
         if: ${{ always() && inputs.report_location != '' }}

diff --git a/.github/workflows/image-publish-trivy.yaml b/.github/workflows/image-publish-trivy.yaml
@@ -187,7 +187,7 @@ jobs:
     permissions:
       packages: read
       security-events: write
-    uses: dBildungsplattform/dbp-github-workflows/.github/workflows/check-trivy.yaml@5
+    uses: dBildungsplattform/dbp-github-workflows/.github/workflows/check-trivy.yaml@7
     with:
       image_ref: ${{ needs.pre_scan.outputs.registry_and_owner }}/${{ inputs.image_name }}@${{ needs.build_and_upload_image.outputs.digest }}
       severity: ${{ inputs.trivy_severity }}