diff --git a/.buildkite/pipeline.yaml b/.buildkite/pipeline.yaml
index 6e9be94b..0352c584 100644
--- a/.buildkite/pipeline.yaml
+++ b/.buildkite/pipeline.yaml
@@ -3,7 +3,9 @@ env:
   IMAGE_REPO: ghcr.io/theopenlane/${APP_NAME}
   GCR_REPO: us-west1-docker.pkg.dev/neural-vista-433523-c1/openlane/openlane
   IMAGE_TAG: ${BUILDKITE_BUILD_NUMBER}-${BUILDKITE_COMMIT:0:8}
-  SONAR_HOST: "https://sonarcloud.io"
+  SONAR_HOST: https://sonarcloud.io
+  # see https://github.com/aquasecurity/trivy/discussions/7668
+  TRIVY_DB_REPOSITORY: mirror.gcr.io/aquasecurity/trivy-db
 
 steps:
   - group: ":knife: Pre-check"