failed to download vulnerability DB

[sk3pp3r]

Description

When using Azure Pipeline task, failed to download vulnerability DB

Desired Behavior

FATAL Fatal error init error: DB error: failed to download vulnerability DB: database download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:adf45102361b3e4241900d33889fc7c9afee08514e79de26011d189af8a32a8e: TOOMANYREQUESTS: retry-after: 37.461µs, allowed: 44000/minute
2024-11-12T15:22:54.9216193Z ##[error]Failed: Trivy detected problems.

Actual Behavior

FATAL Fatal error init error: DB error: failed to download vulnerability DB: database download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:adf45102361b3e4241900d33889fc7c9afee08514e79de26011d189af8a32a8e: TOOMANYREQUESTS: retry-after: 37.461µs, allowed: 44000/minute
2024-11-12T15:22:54.9216193Z ##[error]Failed: Trivy detected problems.

Reproduction Steps

running azure pipeline task

Target

Filesystem

Scanner

Misconfiguration

Output Format

JSON

Mode

None

Debug Output

2024-11-12T15:22:51.7179064Z ==============================================================================
2024-11-12T15:22:51.7179198Z Task         : Trivy: Take control of your application security
2024-11-12T15:22:51.7179470Z Description  : Trivy is the world’s most popular open source vulnerability and misconfiguration scanner. It is reliable, fast, extremely easy to use, and it works wherever you need it.
2024-11-12T15:22:51.7179739Z Version      : 1.5.1
2024-11-12T15:22:51.7179804Z Author       : Aqua Security
2024-11-12T15:22:51.7179881Z Help         : [Learn more about this task](https://github.com/aquasecurity/trivy-azure-pipelines-task)
2024-11-12T15:22:51.7180001Z ==============================================================================
2024-11-12T15:22:52.1472927Z Preparing output location...
2024-11-12T15:22:52.1531005Z Run requested using local Trivy binary...
2024-11-12T15:22:52.1535485Z Finding correct Trivy version to install...
2024-11-12T15:22:52.1540184Z Required Trivy version is v0.53.0
2024-11-12T15:22:52.1555822Z Downloading Trivy...
2024-11-12T15:22:52.1576922Z Downloading: https://github.com/aquasecurity/trivy/releases/download/v0.53.0/trivy_0.53.0_Linux-64bit.tar.gz
2024-11-12T15:22:52.8418958Z Extracting Trivy...
2024-11-12T15:22:52.8419405Z Extracting archive
2024-11-12T15:22:52.8439345Z [command]/usr/bin/tar xC /tmp/ -f /tmp/trivy
2024-11-12T15:22:53.7628364Z Setting permissions...
2024-11-12T15:22:53.7636402Z [command]/usr/bin/chmod +x /tmp/trivy
2024-11-12T15:22:53.7674967Z Configuring options for image scan...
2024-11-12T15:22:53.7678493Z Running Trivy...
2024-11-12T15:22:53.7682836Z [command]/tmp/trivy fs --exit-code 0 --format json --output /tmp/trivy-results-0.8307375873257421.json --ignore-unfixed --scanners vuln,misconfig,secret .
2024-11-12T15:22:54.9141436Z 2024-11-12T15:22:54Z	INFO	Need to update DB
2024-11-12T15:22:54.9142103Z 2024-11-12T15:22:54Z	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
2024-11-12T15:22:54.9142923Z 2024-11-12T15:22:54Z	FATAL	Fatal error	init error: DB error: failed to download vulnerability DB: database download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:adf45102361b3e4241900d33889fc7c9afee08514e79de26011d189af8a32a8e: TOOMANYREQUESTS: retry-after: 37.461µs, allowed: 44000/minute
2024-11-12T15:22:54.9216193Z ##[error]Failed: Trivy detected problems.
2024-11-12T15:22:54.9223944Z Publishing JSON results...
2024-11-12T15:22:54.9231407Z ##[error]Unable to process command '##vso[task.addattachment type=JSON_RESULT;name=trivy0.43899596539341146.json;]/tmp/trivy-results-0.8307375873257421.json' successfully. Please reference documentation (http://go.microsoft.com/fwlink/?LinkId=817296)
2024-11-12T15:22:54.9240285Z ##[error]Value cannot be null. (Parameter 'Cannot upload task attachment file, attachment file location is not specified or attachment file does not exist on disk.')
2024-11-12T15:22:54.9696538Z Done!

Operating System

ubuntu

Version

1.5.1

Checklist

• Run trivy clean --all
• Read the troubleshooting

[DmitriyLewen]

take a look #7699