search

bcgov / nr-hydrometric-rating-curve

A hydrometric rating curve describes the mathematical relationship between stage and discharge. The rating curve app allows users to upload any stage and discharge datasets, develop and optimize rating models as well as save and compare results from previous sessions.
Apache License 2.0
2 stars 0 forks source link

Trivy scan failing #205

Closed tobiasmllr closed 2 weeks ago

tobiasmllr commented 3 weeks ago

The trivy scan is failing with TOOMANYREQUESTS, though it's only running once as far as I can tell. https://github.com/bcgov/nr-hydrometric-rating-curve/actions/runs/11727757171/job/32730656689?pr=204

2024-11-08T18:51:04Z WARN '--scanners config' is deprecated. Use '--scanners misconfig' instead. See https://github.com/aquasecurity/trivy/discussions/5586 for the detail. 2024-11-08T18:51:04Z INFO [vulndb] Need to update DB 2024-11-08T18:51:04Z INFO [vulndb] Downloading vulnerability DB... 2024-11-08T18:51:04Z INFO [vulndb] Downloading artifact... repo="ghcr.io/aquasecurity/trivy-db:2" 2024-11-08T18:51:05Z ERROR [vulndb] Failed to download artifact repo="ghcr.io/aquasecurity/trivy-db:2" err="oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:6286c928825b62501eaa5bb4cdf1b4b7ab80d303e2d7bd99e927ec1472a8509e: TOOMANYREQUESTS: retry-after: 184.863µs, allowed: 44000/minute" 2024-11-08T18:51:05Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from any source Error: Process completed with exit code 1.

DerekRoberts commented 2 weeks ago

@tobiasmllr Trivy has been having problems. I'll make this job optional, so there won't be a block. We can reverse later.

DerekRoberts commented 2 weeks ago

@tobiasmllr Done! Please see #207. :)