Update secret_scan.yml

sovity · Oct 9, 2024 · b28a3f2 · b28a3f2
1 parent 25e4636
commit b28a3f2
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/secret_scan.yml b/.github/workflows/secret_scan.yml
@@ -19,8 +19,9 @@ jobs:
       - name: Run vulnerability scanner
         uses: aquasecurity/trivy-action@0.26.0
         env:
-          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db #try default GitHub db, if failing, use aws mirror instead (https://github.com/aquasecurity/trivy-action/issues/389)
-          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db #try default GitHub db, if failing, use aws mirror instead (https://github.com/aquasecurity/trivy-action/issues/389)
+          #try default GitHub DBs, if failing, use AWS mirror instead (https://github.com/aquasecurity/trivy-action/issues/389)
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
+          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db
         with:
           scan-type: "fs"
           exit-code: "1"