Fix trivy issue

securefederatedai · Oct 30, 2024 · e58e28b · e58e28b
1 parent dfa1b75
commit e58e28b
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -64,7 +64,14 @@ jobs:
 
       - name: Run Trivy code vulnerability scanner (SPDX-JSON Output)
         run: |
-          trivy --quiet fs --format spdx-json --output trivy-code-spdx-results.json --ignore-unfixed --vuln-type os,library --severity CRITICAL,HIGH,MEDIUM,LOW .
+          trivy --quiet fs \
+          --format spdx-json \
+          --output trivy-code-spdx-results.json \
+          --ignore-unfixed \
+          --vuln-type os,library \
+          --severity CRITICAL,HIGH,MEDIUM,LOW \
+          --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db \
+          .
   
       - name: Upload Code Vulnerability Scan Results
         uses: actions/upload-artifact@v3