grafana / alloy

OpenTelemetry Collector distribution with programmable pipelines
https://grafana.com/oss/alloy
Apache License 2.0
1.32k stars 181 forks source link

Trivy scan broken #1172

Closed mattdurham closed 3 months ago

mattdurham commented 3 months ago

What's wrong?

Looks like the workflow action is failing either due to tag name or podman issue.

Steps to reproduce

Check daily checks.

System information

No response

Software version

No response

Configuration

No response

Logs

No response

hairyhenderson commented 3 months ago

The error is:

2024-06-28T08:24:56Z    FATAL   Fatal error image scan error: scan error: unable to initialize a scanner: unable to initialize an image scanner: unable to find the specified image "grafana/alloy:main" in ["docker" "containerd" "podman" "remote"]: 4 errors occurred:

This is because there actually isn't a main tag being pushed. If you build it first during the workflow it'll be available. An alternative is to do a filesystem scan instead (though you'll risk hitting false positives)