search

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
https://aquasecurity.github.io/trivy
Apache License 2.0
23.79k stars 2.34k forks source link

fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] #7939

Closed aqua-bot closed 4 days ago

aqua-bot commented 4 days ago

Backport

This will backport the following commits from main to release/v0.57:

sblatnick commented 1 day ago

Still seeing this in 0.57.1

DmitriyLewen commented 1 day ago

Hello @sblatnick Can you try to clear cache? (trivy clean --scan-cache)

sblatnick commented 1 day ago

This command worked for me. Thanks! (I thought we had tried this, but looks like either we the command never ran when we thought it did or maybe trivy clean --all doesn't include the scan cache.)

DmitriyLewen commented 18 hours ago

hm... trivy clean --all includes clearing of scan cache.

But anyway, it's good that Trivy now works properly.

sblatnick commented 8 hours ago

Mystery solved. We discovered the real problem was we needed to specify the --cache-dir like we do when we use trivy. For my local test, the default worked. But when we tried in our CI/CD tools, we use a custom path for a cache volume in kubernetes.