fix: Use the the GH TOKEN to pull trivy's DB

Signed-off-by: Jorge Turrado <[email protected]>
kedacore · Oct 15, 2024 · 7659a4a · 7659a4a
1 parent 25deb21
commit 7659a4a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/template-trivy-scan.yml b/.github/workflows/template-trivy-scan.yml
@@ -49,6 +49,8 @@ jobs:
           exit-code: ${{ inputs.exit-code }}
           severity: ${{ inputs.severity }}
           trivy-config: trivy.yml
+        env:
+          ACTIONS_RUNTIME_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Temporal fix -> https://github.com/aquasecurity/trivy-action/issues/389#issuecomment-2370823704
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3