Update Trivy Cache #22

	# Note: This workflow only updates the cache. You should create a separate workflow for your actual Trivy scans.
	# In your scan workflow, set TRIVY_SKIP_DB_UPDATE=true and TRIVY_SKIP_JAVA_DB_UPDATE=true.
	name: Update Trivy Cache

	on:
	schedule:
	- cron: '0 0 * * *' # Run daily at midnight UTC
	workflow_dispatch: # Allow manual triggering

	jobs:
	update-trivy-db:
	runs-on: ubuntu-latest
	steps:
	- name: Setup oras
	uses: oras-project/setup-oras@v1

	- name: Get current date
	id: date
	run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT

	- name: Download and extract the vulnerability DB
	run: \|
	mkdir -p .cache/trivy/db
	oras pull ghcr.io/aquasecurity/trivy-db:2
	tar -xzf db.tar.gz -C .cache/trivy/db
	rm db.tar.gz

	- name: Cache DBs
	uses: actions/cache/save@v4
	with:
	path: .cache/trivy
	key: cache-trivy-${{ steps.date.outputs.date }}

Provide feedback