zot/examples/config-cve-trivy.json

{
  "distSpecVersion": "1.1.1",
  "storage": {
    "rootDirectory": "/tmp/zot"
  },
  "http": {
    "address": "127.0.0.1",
    "port": "8080"
  },
  "log": {
    "level": "debug"
  },
  "extensions": {
    "search": {
      "enable": true,
      "cve": {
        "updateInterval": "24h",
        "trivy": {
          "dbRepository": "ghcr.io/aquasecurity/trivy-db",
          "javaDBRepository": "ghcr.io/aquasecurity/trivy-java-db",
          "vulnSeveritySources": ["auto"],
          "sbom": {
            "enable": true,
            "format": "spdx-json"
          }
        }
      }
    }
  }
}