diff --git a/.github/workflows/trivy-code.yml b/.github/workflows/trivy-code.yml index 49b4e64..36bd49a 100644 --- a/.github/workflows/trivy-code.yml +++ b/.github/workflows/trivy-code.yml @@ -23,6 +23,9 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@0.28.0 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db:2,public.ecr.aws/aquasecurity/trivy-db:2 with: scan-type: 'fs' ignore-unfixed: true