secureCodeBox
diff --git a/‎scanners/trivy/templates/trivy-database-cache.yaml
Copy file name to clipboardExpand all lines: scanners/trivy/templates/trivy-database-cache.yaml
+4-2Lines changed: 4 additions & 2 deletions b/‎scanners/trivy/templates/trivy-database-cache.yaml
Copy file name to clipboardExpand all lines: scanners/trivy/templates/trivy-database-cache.yaml
+4-2Lines changed: 4 additions & 2 deletions
diff --git a/‎scanners/trivy/tests/__snapshot__/scanner_test.yaml.snap
Copy file name to clipboardExpand all lines: scanners/trivy/tests/__snapshot__/scanner_test.yaml.snap
+8-4Lines changed: 8 additions & 4 deletions b/‎scanners/trivy/tests/__snapshot__/scanner_test.yaml.snap
Copy file name to clipboardExpand all lines: scanners/trivy/tests/__snapshot__/scanner_test.yaml.snap
+8-4Lines changed: 8 additions & 4 deletions
diff --git a/‎scanners/trivy/values.yaml
Copy file name to clipboardExpand all lines: scanners/trivy/values.yaml
+3Lines changed: 3 additions & 0 deletions b/‎scanners/trivy/values.yaml
Copy file name to clipboardExpand all lines: scanners/trivy/values.yaml
+3Lines changed: 3 additions & 0 deletions
@@ -48,9 +48,11 @@ spec:
       {{- end }}
       volumes:
       - name: cache-dir
-        emptyDir: {}
+        emptyDir:
+          sizeLimit: {{ .Values.trivyDatabaseCache.cacheStorageLimit }}
       - name: tmp-dir
-        emptyDir: {}
+        emptyDir:
+          sizeLimit: {{ .Values.trivyDatabaseCache.cacheStorageLimit }}
       containers:
       - name: trivy-database
         image: "{{ .Values.scanner.image.repository }}:{{ .Values.scanner.image.tag | default .Chart.AppVersion }}"
 
@@ -81,9 +81,11 @@ matches the snapshot:
           securityContext:
             runAsUser: 10001
           volumes:
-            - emptyDir: {}
+            - emptyDir:
+                sizeLimit: 1Gi
               name: cache-dir
-            - emptyDir: {}
+            - emptyDir:
+                sizeLimit: 1Gi
               name: tmp-dir
   3: |
     apiVersion: execution.securecodebox.io/v1
@@ -489,9 +491,11 @@ works properly in k8sScanScope=cluster:
           securityContext:
             runAsUser: 10001
           volumes:
-            - emptyDir: {}
+            - emptyDir:
+                sizeLimit: 1Gi
               name: cache-dir
-            - emptyDir: {}
+            - emptyDir:
+                sizeLimit: 1Gi
               name: tmp-dir
   3: |
     apiVersion: execution.securecodebox.io/v1
 
@@ -123,6 +123,9 @@ trivyDatabaseCache:
   podSecurityContext:
     runAsUser: 10001
 
+  # -- storage limit for the trivy db cache emptyDir volumes. (applied to two volumes)
+  cacheStorageLimit: 1Gi
+
   # -- Optional securityContext set on database cache container (see: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
   securityContext:
     runAsNonRoot: true