feat: make vul db repo configurable

README.md

@@ -194,6 +194,7 @@ Following inputs can be used as `step.with` keys:
 | `cacheDir`      | String  |                                    | Cache directory                               |
 | `timeout`        | String  | `2m0s`                             | Scan timeout duration                         |
 | `ignorePolicy`  | String  |                                    | Filter vulnerabilities with OPA rego language |
+| `dbRepository`      | String  |                                | vulnerability DB OCI repository |
 
 
 [license]: https://github.com/aquasecurity/trivy-pipe/blob/master/LICENSE

pipe.yml

@@ -68,6 +68,10 @@ variables:
     description: 'hide progress output'
     required: false
     default: true
+  - name: dbRepository
+    description: 'comma separated list of directories where traversal is skipped'
+    required: false
+    default: ''
 
 respository: https://github.com/aquasecurity/trivy-pipe
 maintainer: 

pipe/pipe.sh

@@ -61,6 +61,9 @@ fi
 if [ "$hideProgress" == "true" ];then
   ARGS="$ARGS --no-progress"
 fi
+if [ $dbRepository ];then
+ ARGS="$ARGS --db-repository $dbRepository"
+fi
 
 echo "Running trivy with options: ${ARGS}" "${artifactRef}"
 echo "Global options: " "${GLOBAL_ARGS}"