From be5873a81a19c272a3146b059ceb78b3c2bcb834 Mon Sep 17 00:00:00 2001
From: Emterry <emma.terry@digital.justice.gov.uk>
Date: Tue, 22 Oct 2024 16:36:29 +0100
Subject: [PATCH] update scan workflow

---
 .github/workflows/scan-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/scan-image.yml b/.github/workflows/scan-image.yml
index 761d6b8..57b03b1 100644
--- a/.github/workflows/scan-image.yml
+++ b/.github/workflows/scan-image.yml
@@ -31,6 +31,9 @@ jobs:
       - name: Scan
         id: scan
         uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
         with:
           image-ref: ghcr.io/${{ github.repository }}:${{ github.sha }}
           severity: HIGH,CRITICAL