Merge remote-tracking branch 'origin/master' into credit

ark-network · Nov 15, 2024 · a414514 · a414514
2 parents e3b4fc0 + 963f5d8
commit a414514
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/ark.trivy.yaml b/.github/workflows/ark.trivy.yaml
@@ -25,7 +25,10 @@ jobs:
           tags: ${{ github.repository }}:${{ github.sha }}
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/[email protected]
+        uses: aquasecurity/[email protected]
+        env:
+          # avoid GHCR rate limits, see https://github.com/aquasecurity/trivy-db/pull/440 and https://github.com/aquasecurity/trivy-action/issues/389
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
         with:
           image-ref: "${{ github.repository }}:${{ github.sha }}"
           format: "table"