search

jeremylong / Open-Vulnerability-Project

Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)
Apache License 2.0
112 stars 34 forks source link

Cannot pull Docker image #134

Closed munkyjunky closed 7 months ago

munkyjunky commented 8 months ago

I'm trying to follow the documentation to pull the Docker image as mentioned here, to mirror the NVD database.

Attempting to pull the Docker image from ghcr leads to the following error:

▶ docker pull ghcr.io/jeremylong/vulnz:5.1.1 Error response from daemon: manifest unknown

After looking through the code a little, I've found the following (possible) URLs for Docker images:

Can you confirm which (if any) of these are correct, and if they're publicly available?

amfleurke commented 7 months ago

https://ghcr.io/v2/jeremylong/vulnz/manifests/5.1.1 gives UNAUTHORIZED/authentication required

jeremylong commented 7 months ago

Sorry about this - I started a class that has been extremely consuming. For reasons the docker image has not been published yet. It will be published under:

munkyjunky commented 7 months ago

Thanks @jeremylong - would you be able to drop a comment here when they're available please?

jeremylong commented 7 months ago

the docker image should now be available. sorry about the delay. See https://github.com/jeremylong/Open-Vulnerability-Project/releases/tag/v5.1.2

munkyjunky commented 7 months ago

Perfect timing for what I'm doing! I've been able to pull the image from both Dockerhub and ghcr using the latest tag. Thanks!