Skip to content

Commit

Permalink
👷 Address trivy-action rate limit issues
Browse files Browse the repository at this point in the history
Cache workflow taken from their README and tweaked a little bit.
  • Loading branch information
sergei-maertens authored and robinmolen committed Oct 15, 2024
1 parent b5a56bc commit 8e05bed
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -420,6 +420,7 @@ jobs:
uses: actions/download-artifact@v4
with:
name: docker-image-all-extensions-${{ needs.docker_build_setup.outputs.version }}

- name: Scan image with Trivy
uses: aquasecurity/trivy-action@master
with:
Expand All @@ -428,8 +429,10 @@ jobs:
output: 'trivy-results-docker.sarif'
ignore-unfixed: true
env:
# See https://github.com/aquasecurity/trivy-action/issues/389#issuecomment-2368662097
ACTIONS_RUNTIME_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# Uses the cache from trivy.yml workflow
TRIVY_SKIP_DB_UPDATE: true
TRIVY_SKIP_JAVA_DB_UPDATE: true

- name: Upload results to GH Security tab
uses: github/codeql-action/upload-sarif@v3
with:
Expand Down

0 comments on commit 8e05bed

Please sign in to comment.