From 05dee90ac6f1611796bef698406115bddc8f4034 Mon Sep 17 00:00:00 2001
From: Himanshu Bohra <113414131+hibohra1398@users.noreply.github.com>
Date: Sat, 24 Oct 2026 15:58:28 +0530
Subject: [PATCH] Change Trivy DB repository to GitHub Container Registry

Updated Trivy database repository URLs to use GitHub Container Registry.
---
 trivy-image-scan/action.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/trivy-image-scan/action.yml b/trivy-image-scan/action.yml
index d0a59c2..9ef501c 100644
--- a/trivy-image-scan/action.yml
+++ b/trivy-image-scan/action.yml
@@ -98,9 +98,12 @@ runs:
         timeout: ${{ inputs.timeout }}
         limit-severities-for-sarif: true
         exit-code: '1'
+      # env:
+      #   TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
+      #   TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
       env:
-        TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
-        TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
+        TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db
+        TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db
 
     - name: Rerun Trivy vulnerability scanner with logging
       if: failure() && inputs.output-mode != 'log'