Work around trivy ratelimits (TraceMachina#1442)

The ECR registry currently has a lower chance to run into ratelimiting
issues. Technically it's a less scalable registry though, so we might
need to revisit this in the future.

Fixes TraceMachina#1438

tools/local-image-test.nix

@@ -24,5 +24,9 @@ writeShellScriptBin "local-image-test" ''
     ''${IMAGE_NAME}:''${IMAGE_TAG} \
     --highestWastedBytes=0
 
-  ${trivy}/bin/trivy image ''${IMAGE_NAME}:''${IMAGE_TAG}
+  # TODO(aaronmondal): Keep monitoring this for better solutions to ratelimits:
+  #                    https://github.com/aquasecurity/trivy-action/issues/389
+  ${trivy}/bin/trivy image \
+    ''${IMAGE_NAME}:''${IMAGE_TAG} \
+    --db-repository public.ecr.aws/aquasecurity/trivy-db:2
 ''