update reports dir

docker-compose.yml

@@ -36,7 +36,7 @@ services:
       # that directory lets the scanner find it without extra configuration.
       # Remove this line if you do not want the host's runtime dirs exposed.
       # - /run/user:/run/user:ro
-      - ./reports:/reports
+      - ${KOMODO_CACHE_DIR:-.}/cves/reports:/reports
       # Keep the Trivy DB between runs (much faster repeat scans).
       - trivy-cache:/var/lib/trivy
     restart: "no"