From fa070acb00a0d27c6979ed484ced35d47c6cd478 Mon Sep 17 00:00:00 2001
From: Seth Grover <seth.d.grover@gmail.com>
Date: Tue, 22 Oct 2024 13:52:29 -0600
Subject: [PATCH] try to fall back to alternate trivy DB database, see
 aquasecurity/trivy-action#389

---
 .github/workflows/zeek-build-push-latest-ghcr.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/zeek-build-push-latest-ghcr.yml b/.github/workflows/zeek-build-push-latest-ghcr.yml
index 23e1957..a9b05c4 100644
--- a/.github/workflows/zeek-build-push-latest-ghcr.yml
+++ b/.github/workflows/zeek-build-push-latest-ghcr.yml
@@ -115,6 +115,8 @@ jobs:
         if: ${{ matrix.platform == 'linux/amd64' }}
         id: trivy-scan
         uses: aquasecurity/trivy-action@master
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
         with:
           scan-type: 'image'
           scanners: 'vuln'