Merge dependebot pr (#217)

* Bump avhengigheter * Oppdaterte package-lock.json * Workaround until Trivy fikses issue with downloading db artifacts
navikt · Nov 12, 2024 · 97ae4c0 · 97ae4c0
1 parent b92c122
commit 97ae4c0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -90,6 +90,8 @@ jobs:
         run: docker pull ${{ needs.test-build-and-push.outputs.image }}
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
+        env: # Workaround for rate limiting inntil denne er fikset: https://github.com/aquasecurity/trivy-action/issues/389
+          TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db"
         with:
           image-ref: "${{ needs.test-build-and-push.outputs.image }}"
           format: "sarif"