- Move to only public ecr for trivy as there ratelimits are higher

- Change trivy-action to pull from ecr registry
Signed-off-by: Shailesh Pant <[email protected]>

.github/workflows/trivy.yml

@@ -46,7 +46,7 @@ jobs:
           --ignore-unfixed \
           --vuln-type os,library \
           --severity CRITICAL,HIGH,MEDIUM,LOW \
-          --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \
+          --db-repository 'public.ecr.aws/aquasecurity/trivy-db:2' \
           .
 
       - name: Upload Code Vulnerability Scan Results
@@ -57,6 +57,8 @@ jobs:
 
       - name: Run Trivy vulnerability scanner for Docker image (JSON Output)
         uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
         with:
           image-ref: 'docker.io/securefederatedai/openfl:${{ github.sha }}'
           format: 'json'
@@ -80,7 +82,7 @@ jobs:
           --ignore-unfixed \
           --vuln-type os,library \
           --severity CRITICAL,HIGH,MEDIUM,LOW \
-          --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \
+          --db-repository 'public.ecr.aws/aquasecurity/trivy-db:2' \
           .
   
       - name: Upload Code Vulnerability Scan Results