From f5c03855e40d2dab067774f63c0ef2220204de8d Mon Sep 17 00:00:00 2001 From: James Blair Date: Sun, 6 Oct 2024 10:41:56 +1300 Subject: [PATCH] Merge pull request #18687 from k8s-infra-cherrypick-robot/cherry-pick-18672-to-release-3.5 [3.5] github/workflows: use ECR mirror for Trivy's DB --- .github/workflows/release.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index ed4a4cfd77ca..5139db4876d0 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -64,6 +64,11 @@ jobs: severity: 'CRITICAL,HIGH' format: 'sarif' output: 'trivy-results-${{ matrix.platforms }}.sarif' + env: + # Use AWS' ECR mirror for the trivy-db image, as GitHub's Container + # Registry is returning a TOOMANYREQUESTS error. + # Ref: https://github.com/aquasecurity/trivy-action/issues/389 + TRIVY_DB_REPOSITORY: 'public.ecr.aws/aquasecurity/trivy-db:2' - name: upload scan results uses: github/codeql-action/upload-sarif@956f09c2ef1926b580554b9014cfb8a51abf89dd # v2.16.6 with: