.gitea: set Trivy DB from AWS

.gitea/workflows/release.yaml

@@ -49,7 +49,7 @@ jobs:
             rusian/gitolite-cgit:latest
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.27.0
         with:
           image-ref: rusian/gitolite-cgit:latest
           format: 'table'
@@ -57,6 +57,11 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os'
           severity: 'CRITICAL,HIGH'
+        env:
+          TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
+          TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
+          TRIVY_SKIP_DB_UPDATE: false
+          TRIVY_SKIP_JAVA_DB_UPDATE: false
 
       - name: Push Docker image
         uses: docker/build-push-action@v6