Skip to content

Commit 8e05bed

Browse files
sergei-maertensrobinmolen
authored andcommitted
👷 Address trivy-action rate limit issues
Cache workflow taken from their README and tweaked a little bit.
1 parent b5a56bc commit 8e05bed

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

Diff for: .github/workflows/ci.yml

+5-2
Original file line numberDiff line numberDiff line change
@@ -420,6 +420,7 @@ jobs:
420420
uses: actions/download-artifact@v4
421421
with:
422422
name: docker-image-all-extensions-${{ needs.docker_build_setup.outputs.version }}
423+
423424
- name: Scan image with Trivy
424425
uses: aquasecurity/trivy-action@master
425426
with:
@@ -428,8 +429,10 @@ jobs:
428429
output: 'trivy-results-docker.sarif'
429430
ignore-unfixed: true
430431
env:
431-
# See https://github.com/aquasecurity/trivy-action/issues/389#issuecomment-2368662097
432-
ACTIONS_RUNTIME_TOKEN: ${{ secrets.GITHUB_TOKEN }}
432+
# Uses the cache from trivy.yml workflow
433+
TRIVY_SKIP_DB_UPDATE: true
434+
TRIVY_SKIP_JAVA_DB_UPDATE: true
435+
433436
- name: Upload results to GH Security tab
434437
uses: github/codeql-action/upload-sarif@v3
435438
with:

0 commit comments

Comments
 (0)