docker / scout-action

Docker Scout GitHub Action
https://docker.com/products/docker-scout
Other
91 stars 29 forks source link

Error: could not authenticate: user githubactions not entitled to use Docker Scout #48

Open Nazargora opened 4 months ago

Nazargora commented 4 months ago

i have this error if i use Login to a registry to pull private images (non Docker Hub. I add here registry-user and registry-password Service principle, Access key and user name, PAT and name of PAT. It always do not work.Byt if I use dockerhub user and dockerhub password it is work. What is problem? I tried use also login-action witt ACR and I had login succeeded but docker scout always failed. My action name: Build and Scan Docker Image

on: [push, pull_request]

jobs: build: runs-on: ubuntu-latest

steps:
 - name: Checkout code
   uses: actions/checkout@v2

 - name: Login to ACR
   uses: docker/login-action@v3
   with:
      registry: test.azurecr.io
      username: test
      password: test123

 - name: Build and Push Bckend
   shell: bash
   run: |
    docker build -t my-node-app .
 - name: Docker Scout
   id: docker-scout
   if: ${{ github.event_name != 'pull_request_target' }}
   uses: docker/scout-action@v1.10.0
   with:
      command: cves
      image: my-node-app
      only-severities: low
      exit-code: true                          how to fix?
mikeparker commented 4 months ago

You need to be authenticated to Docker Hub in order to use scout, see notes here

https://github.com/docker/scout-action?tab=readme-ov-file#authentication