Trivy scanner in air-gapped environment about harbor HOT 2 CLOSED

To use Trivy scanner with Harbor in an air-gapped environment, please refer to this doc:

• https://github.com/goharbor/harbor/wiki/Harbor-FAQs#trivy-in-air-gapped-environment
  Please also set skip_java_db_update to true, if your harbor version >= 2.10.1 (or >= v2.9.3)

from harbor.

To use Trivy scanner with Harbor in an air-gapped environment, please refer to this doc:

• https://github.com/goharbor/harbor/wiki/Harbor-FAQs#trivy-in-air-gapped-environment
  Please also set skip_java_db_update to true, if your harbor version >= 2.10.1 (or >= v2.9.3)

the link that you provided is for initial setup which i already did. I am asking specifically about the continuous update.

we all know that trivy db gets updated periodically and want to make sure that we have an updated db mounted in the container.
I have a cronjob which will download the trivy db from s3 and mount it to /home/scanner/.cache/trivy dir. If we update the db in the S3(for my test i just uploaded an empty trivy.db) so i know that when trivy scans against that db it will show no vulnerability but the trivy is still showing the vulnerabilities. Either my test scenario is wrong or there is something going on in the backend that i am unaware of.

so that's the reason why i am asking is it creating the metada.json and trivy.db inside /home/scanner/.cache/trivy/db/ based out of /home/scanner/.cache/trivy/trivy.db

from harbor.