fix(ci): use reachable vulnerability database mirror

scripts/ci-build-images.sh

@@ -11,6 +11,7 @@ cache_limit=${AI_GATEWAY_BUILDX_CACHE_LIMIT:-2gb}
 platform=${AI_GATEWAY_PLATFORM:-linux/amd64}
 keep_images=0
 build_complete=0
+readonly trivy_db_repository=ghcr.m.daocloud.io/aquasecurity/trivy-db:2
 
 case ${1:-} in
   '') ;;
@@ -91,7 +92,8 @@ docker buildx build --builder "$builder" \
   --tag "$web_image" .
 
 for image in "$api_image" "$web_image"; do
-  trivy image --scanners vuln,secret --severity HIGH,CRITICAL --ignore-unfixed \
+  trivy image --db-repository "$trivy_db_repository" \
+    --scanners vuln,secret --severity HIGH,CRITICAL --ignore-unfixed \
     --exit-code 1 --timeout 15m "$image"
 done