Update Trivy Cache #59

	# Note: This workflow only updates the cache. You should create a separate workflow for your actual Trivy scans.
	# In your scan workflow, set TRIVY_SKIP_DB_UPDATE=true and TRIVY_SKIP_JAVA_DB_UPDATE=true.
	name: Update Trivy Cache

	on:
	schedule:
	- cron: '0 0 * * *' # Run daily at midnight UTC
	workflow_dispatch: # Allow manual triggering

	jobs:
	update-trivy-db:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	egress-policy: audit

	- name: Setup oras
	uses: oras-project/setup-oras@9c92598691bfef1424de2f8fae81941568f5889c # v1.2.1

	- name: Get current date
	id: date
	run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT

	- name: Download and extract the vulnerability DB
	run: \|
	mkdir -p $GITHUB_WORKSPACE/.cache/trivy/db
	oras pull ghcr.io/aquasecurity/trivy-db:2
	tar -xzf db.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/db
	rm db.tar.gz

	- name: Cache DBs
	uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
	with:
	path: ${{ github.workspace }}/.cache/trivy
	key: cache-trivy-${{ steps.date.outputs.date }}

Provide feedback