From 3ad7235a873e6e64bc18d21f5ca69c03fc762de5 Mon Sep 17 00:00:00 2001 From: Chris Bono Date: Tue, 15 Oct 2024 17:53:00 -0500 Subject: [PATCH] [CI] Add github-pat to trivy-scan.yml Adds Github token to the trivy scan in an effort to prevent the recent CI failures due to TOOMANYREQUESTS on downloading the Trivy db. --- .github/workflows/trivy-scan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 7172aacf..7981d2c2 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -44,6 +44,7 @@ jobs: scan-type: 'fs' scan-ref: '${{ env.LOCAL_REPOSITORY_PATH }}/org/springframework/pulsar' trivy-config: ${{ inputs.config-path }} + github-pat: ${{ secrets.GH_ACTIONS_REPO_TOKEN }} - name: Upload Trivy scan results to GitHub Security tab if: inputs.upload-results uses: github/codeql-action/upload-sarif@v3