ci: customize TRIVY_DB_REPOSITORY due to rate-limits on github

enix · Oct 31, 2024 · 383608a · 383608a
1 parent ef4905f
commit 383608a
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -17,6 +17,7 @@ jobs:
       HARBOR_REPO: "kube-image-keeper/kube-image-keeper"
       GHCR_IMAGE: "ghcr.io/enix/kube-image-keeper"
       QUAY_IMAGE: "quay.io/enix/kube-image-keeper"
+      TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
@@ -29,7 +30,6 @@ jobs:
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@0.28.0
-        continue-on-error: true
         with:
           scan-type: 'fs'
           ignore-unfixed: true
@@ -38,7 +38,6 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
-        continue-on-error: true
         with:
           sarif_file: 'trivy-results.sarif'