From 67c349a295f595206b4754e0c3947a92f7abc66c Mon Sep 17 00:00:00 2001 From: Wantong Date: Sun, 10 Nov 2024 23:37:40 -0800 Subject: [PATCH] chore: fix trivy workflow by using mcr trivy images (#948) --- .github/workflows/trivy.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index f966d3edb..45f3858f4 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -6,6 +6,7 @@ on: create: # Publish semver tags as releases. tags: [ 'v*.*.*' ] + workflow_dispatch: {} permissions: contents: read @@ -75,6 +76,7 @@ jobs: env: TRIVY_USERNAME: ${{ github.actor }} TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} + TRIVY_DB_REPOSITORY: mcr.microsoft.com/mirror/ghcr/aquasecurity/trivy-db - name: Scan ${{ env.REGISTRY }}/${{ env.MEMBER_AGENT_IMAGE_NAME }}:${{ env.IMAGE_VERSION }} @@ -90,6 +92,7 @@ jobs: env: TRIVY_USERNAME: ${{ github.actor }} TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} + TRIVY_DB_REPOSITORY: mcr.microsoft.com/mirror/ghcr/aquasecurity/trivy-db - name: Scan ${{ env.REGISTRY }}/${{ env.REFRESH_TOKEN_IMAGE_NAME }}:${{ env.IMAGE_VERSION }} uses: aquasecurity/trivy-action@master @@ -104,3 +107,4 @@ jobs: env: TRIVY_USERNAME: ${{ github.actor }} TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} + TRIVY_DB_REPOSITORY: mcr.microsoft.com/mirror/ghcr/aquasecurity/trivy-db