ci(aria): pre-baked toolchain + trivy --skip-db-update (fix gpg /dev/tty + trivy cache)

.gitea/workflows/cd-develop.yml

@@ -19,16 +19,8 @@ jobs:
       - name: Clean runner disk
         run: docker system prune -f 2>/dev/null || true
 
-      - name: Install Java 21 and Maven
-        run: |
-          apt-get update -qq
-          apt-get install -y -qq wget apt-transport-https gnupg
-          wget -qO - https://packages.adoptium.net/artifactory/api/gpg/key/public | gpg --dearmor -o /usr/share/keyrings/adoptium.gpg
-          echo "deb [signed-by=/usr/share/keyrings/adoptium.gpg] https://packages.adoptium.net/artifactory/deb $(. /etc/os-release && echo $VERSION_CODENAME) main" | tee /etc/apt/sources.list.d/adoptium.list
-          apt-get update -qq
-          apt-get install -y -qq temurin-21-jdk maven
-          java -version
-          mvn -version
+      - name: Verify toolchain
+        run: java -version && mvn -version && trivy --version
 
       - name: Configure Maven settings
         run: |
@@ -73,15 +65,13 @@ jobs:
       - name: Build JAR
         run: mvn clean package -DskipTests -B
 
-      - name: Install Trivy
-        run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
-
       - name: Trivy vulnerability scan
         run: |
           trivy fs \
             --exit-code 1 \
             --severity HIGH,CRITICAL \
             --ignore-unfixed \
+            --skip-db-update \
             --scanners vuln \
             --format table \
             target/