From fbda53a81e57eeaea9b4a4c3d2bc9098f60456c7 Mon Sep 17 00:00:00 2001
From: codex <codex@bstein.dev>
Date: Tue, 21 Apr 2026 22:50:22 -0300
Subject: [PATCH] ci(pegasus): use preloaded quality scanner image

---
 Jenkinsfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 0a460a5..89d5ee8 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -32,7 +32,7 @@ spec:
         - name: workspace-volume
           mountPath: /home/jenkins/agent
     - name: quality-tools
-      image: registry.bstein.dev/bstein/quality-tools:sonar8.0.1-trivy0.70.0-arm64
+      image: registry.bstein.dev/bstein/quality-tools:sonar8.0.1-trivy0.70.0-db20260422-arm64
       command: ["cat"]
       tty: true
       volumeMounts:
@@ -141,7 +141,7 @@ PY
             set -euo pipefail
             mkdir -p build
             set +e
-            trivy fs --no-progress --format json --output build/trivy-fs.json --scanners vuln,secret,misconfig --severity HIGH,CRITICAL .
+            trivy fs --cache-dir "${TRIVY_CACHE_DIR}" --skip-db-update --timeout 5m --no-progress --format json --output build/trivy-fs.json --scanners vuln,secret,misconfig --severity HIGH,CRITICAL .
             trivy_rc=$?
             set -e
             if [ ! -s build/trivy-fs.json ]; then