- Move to only public ecr for trivy as there ratelimits are higher

Signed-off-by: Shailesh Pant <[email protected]>
securefederatedai · Nov 13, 2024 · 74b6884 · 74b6884
1 parent 0e16aff
commit 74b6884
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -46,7 +46,7 @@ jobs:
           --ignore-unfixed \
           --vuln-type os,library \
           --severity CRITICAL,HIGH,MEDIUM,LOW \
-          --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \
+          --db-repository 'public.ecr.aws/aquasecurity/trivy-db' \
           .
 
       - name: Upload Code Vulnerability Scan Results
@@ -80,7 +80,7 @@ jobs:
           --ignore-unfixed \
           --vuln-type os,library \
           --severity CRITICAL,HIGH,MEDIUM,LOW \
-          --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \
+          --db-repository 'public.ecr.aws/aquasecurity/trivy-db' \
           .
   
       - name: Upload Code Vulnerability Scan Results