Provide alternative Trivy repo

Added enviromental variables with multiple trivy repos.
spring-cloud · Nov 18, 2024 · ee86eb2 · ee86eb2
1 parent 4e6d511
commit ee86eb2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml
@@ -20,7 +20,7 @@ on:
         description: 'Maven Thread Option. Examples 0.5C, 2'
       enableSecurityScan:
         type: boolean
-        required: false
+        required: true
         default: false
         description: 'Enable security scan with Trivy'
     secrets:
@@ -40,6 +40,8 @@ env:
   VERBOSE: ${{ (github.debug || inputs.verbose) && 'true' || '' }}
   BRANCH: ${{ inputs.branch }}
   MAVEN_THREADS: ${{ inputs.mavenThreads }}
+  TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
+  TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
 
 jobs:
   scan: