CVE Scanning #899
security.yml
on: schedule
Matrix: dockerfile-scan
Matrix: dotnet-modules-scan
Matrix: gradle-modules-scan
Matrix: node-modules-scan
Annotations
17 errors
trade-feed-dockerfile-scan
2024-09-24T08:03:41Z INFO Need to update DB
2024-09-24T08:03:41Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-09-24T08:03:43Z INFO Vulnerability scanning is enabled
2024-09-24T08:03:43Z INFO Secret scanning is enabled
2024-09-24T08:03:43Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-24T08:03:43Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-09-24T08:03:58Z INFO [python] License acquired from METADATA classifiers may be subject to additional terms name="mercurial" version="5.6.1"
2024-09-24T08:04:04Z INFO Java DB Repository repository=ghcr.io/aquasecurity/trivy-java-db:1
2024-09-24T08:04:04Z INFO Downloading the Java DB...
2024-09-24T08:04:06Z FATAL Fatal error image scan error: scan error: scan failed: failed analysis: analyze error: pipeline error: failed to analyze layer (sha256:7e333a49474511f1f4930ca0b9ecc33093525debc979955e613a1ea3d3a1f4e2): post analysis error: post analysis error: Unable to initialize the Java DB: Java DB update failed: DB download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-java-db/blobs/sha256:9db93b26e3cf8e1145331700e688ae806815ad195271dfdf171f89e633d349a4: TOOMANYREQUESTS: retry-after: 915.586µs, allowed: 44000/minute
|
position-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
position-service-dockerfile-scan
The operation was canceled.
|
account-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
account-service-dockerfile-scan
The operation was canceled.
|
database-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
database-dockerfile-scan
2024-09-24T08:03:40Z INFO Need to update DB
2024-09-24T08:03:40Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-09-24T08:03:42Z INFO Vulnerability scanning is enabled
2024-09-24T08:03:42Z INFO Secret scanning is enabled
2024-09-24T08:03:42Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-24T08:03:42Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-09-24T08:04:09Z INFO Java DB Repository repository=ghcr.io/aquasecurity/trivy-java-db:1
2024-09-24T08:04:09Z INFO Downloading the Java DB...
2024-09-24T08:04:10Z FATAL Fatal error image scan error: scan error: scan failed: failed analysis: analyze error: pipeline error: failed to analyze layer (sha256:c96bb6ac379f278ab8dcf9bc6b7b22a4de4d52079da0fcfea507be14f911ebb1): post analysis error: post analysis error: Unable to initialize the Java DB: Java DB update failed: DB download error: OCI repository error: 1 error occurred:
* GET https://ghcr.io/v2/aquasecurity/trivy-java-db/manifests/1: TOOMANYREQUESTS: retry-after: 294.625µs, allowed: 44000/minute
|
trade-processor-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
trade-processor-dockerfile-scan
The operation was canceled.
|
reference-data-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
reference-data-dockerfile-scan
The operation was canceled.
|
people-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
people-service-dockerfile-scan
The operation was canceled.
|
trade-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
trade-service-dockerfile-scan
The operation was canceled.
|
web-front-end/angular-dockerfile-scan
The job was canceled because "trade-feed" failed.
|
web-front-end/angular-dockerfile-scan
The operation was canceled.
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
Depcheck report dotnet-modules-scan
|
52.9 KB |
|
Depcheck report gradle-modules-scan account-service
|
75.1 KB |
|
Depcheck report gradle-modules-scan database
|
43.5 KB |
|
Depcheck report gradle-modules-scan position-service
|
75.1 KB |
|
Depcheck report gradle-modules-scan trade-processor
|
79.3 KB |
|
Depcheck report gradle-modules-scan trade-service
|
78.9 KB |
|
Depcheck report reference-data
|
526 KB |
|
Depcheck report trade-feed
|
162 KB |
|
Depcheck report web-front-end-angular
|
322 KB |
|
Depcheck report web-front-end-react
|
1.24 MB |
|