Provide for disabling security scan in ci-pr.yml and adding alternati…

…ve repo Added env to control the scan. Added env to identify alternate repo.
spring-cloud · Nov 18, 2024 · b70a10c · b70a10c
1 parent 8ebc627
commit b70a10c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
@@ -4,7 +4,10 @@ on:
   pull_request:
 
 env:
-  ENABLE_SECURITY_SCAN: 'false'
+  ENABLE_SECURITY_SCAN: 'true'
+  TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
+  TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
+
 
 jobs:
   build: