From 1af428aaa4298fe7d4ca1c5ef408ba7b4c295b67 Mon Sep 17 00:00:00 2001 From: Ivan Valdes Date: Wed, 2 Oct 2024 12:52:41 -0700 Subject: [PATCH] github/workflows: use ECR mirror for Trivy's DB GitHub Container Registry is returning a TOOMANYREQUESTS error. Switch to AWS ECR mirror, as suggested in https://github.com/aquasecurity/trivy-action/issues/389. Signed-off-by: Ivan Valdes --- .github/workflows/release.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 2f4d3b42f39..8017930a41c 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -66,6 +66,11 @@ jobs: severity: 'CRITICAL,HIGH' format: 'sarif' output: 'trivy-results-${{ matrix.platforms }}.sarif' + env: + # Use AWS' ECR mirror for the trivy-db image, as GitHub's Container + # Registry is returning a TOOMANYREQUESTS error. + # Ref: https://github.com/aquasecurity/trivy-action/issues/389 + TRIVY_DB_REPOSITORY: 'public.ecr.aws/aquasecurity/trivy-db:2' - name: upload scan results uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10 with: