fix(trivy): prevent rate-limit issues

sovity · Oct 9, 2024 · 1dc1d3b · 1dc1d3b
1 parent 853420e
commit 1dc1d3b
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/.github/workflows/license_scan.yml b/.github/workflows/license_scan.yml
@@ -13,7 +13,10 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Run license scanner
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db #mirror because of https://github.com/aquasecurity/trivy-action/issues/389
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db #mirror because of https://github.com/aquasecurity/trivy-action/issues/389
         with:
           scan-type: "rootfs"
           scan-ref: "."
@@ -32,7 +35,10 @@ jobs:
       - name: npm install (authority-portal-frontend)
         run: cd authority-portal-frontend && npm install
       - name: Run license scanner
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db #mirror because of https://github.com/aquasecurity/trivy-action/issues/389
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db #mirror because of https://github.com/aquasecurity/trivy-action/issues/389
         with:
           scan-type: "repo"
           scan-ref: "."