From 3266b47a83dfa18c2327004389b6c0ffedcba685 Mon Sep 17 00:00:00 2001
From: Corneil du Plessis <corneil.du-plessis@broadcom.com>
Date: Wed, 20 Nov 2024 11:51:59 +0200
Subject: [PATCH] Restore scan in CI-PR and Provide alternative Trivy repo.
 (#579)

Added enviromental variables with multiple trivy repos.
Restore scan after build.
---
 .github/workflows/ci-pr.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index f2549102..70212f0a 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -12,6 +12,8 @@ env:
   ARTIFACTORY_USERNAME: 'anonymous'
   ARTIFACTORY_PASSWORD: 'anonymous'
   SKIP_DEPLOY: 'true'
+  TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
+  TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
 
 jobs:
   build:
@@ -59,6 +61,13 @@ jobs:
           VERBOSE: ${{ github.debug && 'true' || '' }}
         run: |
           ./build-apps.sh "-T 1C package -Psnapshot"
+      - name: 'Configure: Install Trivy'
+        uses: ./.github/actions/install-trivy
+      - name: 'Action: Trivy scan'
+        shell: bash
+        run: |
+          BUILD_DIR=$(realpath $MAIN_PATH)
+          $BUILD_DIR/scan-folders.sh table
       - name: 'Upload: Error logs'
         if: ${{ failure() }}
         uses: actions/upload-artifact@v3