Hi @benji78 ,

I am not sure how configure for example dbRepository would help you to skip this db downloading ops if this is the requirements. I assume these configs only allow you to set up the private repository address.

Best,
Miner

It may not have been clear that I want to use a private repository as a replacement for ghcr.io from which Trivy can automatically and regularly fetch both databases. Therefore I do not want to use skipDBUpdate which is what I believe you are referring to. To reiterate, the example commands I gave are just a way to manually import both databases through the private repository but having a runner or chron job run these commands regularly it is not very efficient or practical.

Let's double check if the repository can be set via env variable.

--db-repository and --java-db-repository would need to be added here goharbor/harbor-scanner-trivy/pkg/trivy/wrapper.go#L203
However, in this repository's README, trivy.image.repository is still goharbor/trivy-adapter-photon which I believe was removed 4 days ago in favour of goharbor/harbor-scanner-trivy which used to be here aquasecurity/harbor-scanner-trivy

It seems that goharbor/harbor-scanner-trivy#3 has been merged and released with Harbor 2.12.0., which doesn't have an updated Helm chart yet. What needs to be done to the Helm chart to make this available?