Am using running @trivy inside a pipeline
- task: trivy@1 displayName: Scan image with Trivy inputs: loginDockerConfig: true ignoreUnfixed: true severities: HIGH,CRITICAL image: ${{ parameters.registryEndpoint }}/${{ parameters.imageName }}:$(tagToScan) options: --timeout 20m --ignorefile ${{ parameters.trivyIgnoreFile }} # add a trivyignore file to your repo with the CVE codes that you want to ignore e.g. # CVE-2023-0464 (default path is ".trivyignore") debug: ${{ parameters.trivyDebug }}
and am getting this error
`Digest: sha256:275243b81dcc2728dd9b54125f62fa636528364f8d44b88b7d72ef47ac6ad86d
Status: Downloaded newer image for aquasec/trivy:latest
2023-11-08T08:19:21.584Z WARN '--security-checks' is deprecated. Use '--scanners' instead.
2023-11-08T08:19:21.593Z INFO Need to update DB
2023-11-08T08:19:21.593Z INFO DB Repository: ghcr.io/aquasecurity/trivy-db
2023-11-08T08:19:21.593Z INFO Downloading DB...
2023-11-08T08:19:21.697Z FATAL init error: DB error: failed to download vulnerability DB: database download error: OCI repository error: 1 error occurred:
Get "https://ghcr.io/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority`
please assist
Am using running @trivy inside a pipeline
- task: trivy@1 displayName: Scan image with Trivy inputs: loginDockerConfig: true ignoreUnfixed: true severities: HIGH,CRITICAL image: ${{ parameters.registryEndpoint }}/${{ parameters.imageName }}:$(tagToScan) options: --timeout 20m --ignorefile ${{ parameters.trivyIgnoreFile }} # add a trivyignore file to your repo with the CVE codes that you want to ignore e.g. # CVE-2023-0464 (default path is ".trivyignore") debug: ${{ parameters.trivyDebug }}and am getting this error `Digest: sha256:275243b81dcc2728dd9b54125f62fa636528364f8d44b88b7d72ef47ac6ad86d Status: Downloaded newer image for aquasec/trivy:latest 2023-11-08T08:19:21.584Z WARN '--security-checks' is deprecated. Use '--scanners' instead. 2023-11-08T08:19:21.593Z INFO Need to update DB 2023-11-08T08:19:21.593Z INFO DB Repository: ghcr.io/aquasecurity/trivy-db 2023-11-08T08:19:21.593Z INFO Downloading DB... 2023-11-08T08:19:21.697Z FATAL init error: DB error: failed to download vulnerability DB: database download error: OCI repository error: 1 error occurred: