diff --git a/.github/workflows/aqua-pr.yml b/.github/workflows/aqua-pr.yml index dc38b05..d2a8c52 100644 --- a/.github/workflows/aqua-pr.yml +++ b/.github/workflows/aqua-pr.yml @@ -15,7 +15,8 @@ jobs: - name: Run Aqua scanner uses: docker://aquasec/aqua-scanner with: - args: trivy fs --sast --scanners misconfig,vuln,secret --db-repository=registry.aquasec.com/trivy-db:2 --checks-bundle-repository=registry.aquasec.com/trivy-checks:1 --java-db-repository=registry.aquasec.com/trivy-java-db:1 /github/workspace + args: trivy fs --download-java-db-only --java-db-repository=registry.aquasec.com/trivy-java-db:1 + #args: trivy fs --sast --scanners misconfig,vuln,secret --db-repository=registry.aquasec.com/trivy-db:2 --checks-bundle-repository=registry.aquasec.com/trivy-checks:1 --java-db-repository=registry.aquasec.com/trivy-java-db:1 /github/workspace env: AQUA_KEY: ${{ secrets.AQUA_KEY }} AQUA_SECRET: ${{ secrets.AQUA_SECRET }}