-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: add alternate trivy db sources #283
fix: add alternate trivy db sources #283
Conversation
Interesting. I'm sure ECR will also have rate limits, but given that this is such a simple change, we can give it a try. Can you also change this: https://github.com/canonical/rocks-pipelines/blob/main/src/rocks/tests/Vulnerability-Scan.py (that's used in other legacy pipelines) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Lets see how it goes. :) I just updated trivy's action to support multiple trivy-db sources. If that is not enough we can cache the db in a private repo. |
Ping the @canonical/rocks team.
Features in this PR: