From 2821867bde0f7239ee22ae71068458e76f44900c Mon Sep 17 00:00:00 2001
From: Maciej Golaszewski <maciej.golaszewski@canonical.com>
Date: Thu, 14 Nov 2024 13:09:28 +0100
Subject: [PATCH] wip1

---
 .github/workflows/trivy.yaml | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 017d53c8..f95f0bf7 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -2,15 +2,21 @@ name: Trivy
 
 on:
   pull_request:
-  schedule:
-    - cron: '0 10 * * *'
-
+#  schedule:
+#    - cron: '0 10 * * *'
+#  push:
+#    branches:
+#      - main
+#      - 'v[0-9]+.[0-9]+'
+#      - '[0-9]+.[0-9]+'
+#    tags:
+#      - 'v[0-9]+.[0-9]+'
 jobs:
   scan:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        branch: [master]
+        branch: [master, 'v[0-9]+.[0-9]+', '[0-9]+.[0-9]+']
     permissions:
       security-events: write
     steps:
@@ -26,6 +32,8 @@ jobs:
           format: "sarif"
           output: "output.sarif"
           severity: "MEDIUM,HIGH,CRITICAL"
+        env:
+          TRIVY_DB-REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db"
       - name: Get commit sha
         run: |
           SHA="$(git rev-parse HEAD)"