Skip to content

CVE Scanning

CVE Scanning #899

Triggered via schedule September 24, 2024 08:02
Status Failure
Total duration 2m 14s
Artifacts 10

security.yml

on: schedule
Matrix: dockerfile-scan
Matrix: dotnet-modules-scan
Matrix: gradle-modules-scan
Matrix: node-modules-scan
Fit to window
Zoom out
Zoom in

Annotations

17 errors
trade-feed-dockerfile-scan
2024-09-24T08:03:41Z INFO Need to update DB 2024-09-24T08:03:41Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2" 2024-09-24T08:03:43Z INFO Vulnerability scanning is enabled 2024-09-24T08:03:43Z INFO Secret scanning is enabled 2024-09-24T08:03:43Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning 2024-09-24T08:03:43Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection 2024-09-24T08:03:58Z INFO [python] License acquired from METADATA classifiers may be subject to additional terms name="mercurial" version="5.6.1" 2024-09-24T08:04:04Z INFO Java DB Repository repository=ghcr.io/aquasecurity/trivy-java-db:1 2024-09-24T08:04:04Z INFO Downloading the Java DB... 2024-09-24T08:04:06Z FATAL Fatal error image scan error: scan error: scan failed: failed analysis: analyze error: pipeline error: failed to analyze layer (sha256:7e333a49474511f1f4930ca0b9ecc33093525debc979955e613a1ea3d3a1f4e2): post analysis error: post analysis error: Unable to initialize the Java DB: Java DB update failed: DB download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-java-db/blobs/sha256:9db93b26e3cf8e1145331700e688ae806815ad195271dfdf171f89e633d349a4: TOOMANYREQUESTS: retry-after: 915.586µs, allowed: 44000/minute
position-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
position-service-dockerfile-scan
The operation was canceled.
account-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
account-service-dockerfile-scan
The operation was canceled.
database-dockerfile-scan
The job was canceled because "trade-feed" failed.
database-dockerfile-scan
2024-09-24T08:03:40Z INFO Need to update DB 2024-09-24T08:03:40Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2" 2024-09-24T08:03:42Z INFO Vulnerability scanning is enabled 2024-09-24T08:03:42Z INFO Secret scanning is enabled 2024-09-24T08:03:42Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning 2024-09-24T08:03:42Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection 2024-09-24T08:04:09Z INFO Java DB Repository repository=ghcr.io/aquasecurity/trivy-java-db:1 2024-09-24T08:04:09Z INFO Downloading the Java DB... 2024-09-24T08:04:10Z FATAL Fatal error image scan error: scan error: scan failed: failed analysis: analyze error: pipeline error: failed to analyze layer (sha256:c96bb6ac379f278ab8dcf9bc6b7b22a4de4d52079da0fcfea507be14f911ebb1): post analysis error: post analysis error: Unable to initialize the Java DB: Java DB update failed: DB download error: OCI repository error: 1 error occurred: * GET https://ghcr.io/v2/aquasecurity/trivy-java-db/manifests/1: TOOMANYREQUESTS: retry-after: 294.625µs, allowed: 44000/minute
trade-processor-dockerfile-scan
The job was canceled because "trade-feed" failed.
trade-processor-dockerfile-scan
The operation was canceled.
reference-data-dockerfile-scan
The job was canceled because "trade-feed" failed.
reference-data-dockerfile-scan
The operation was canceled.
people-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
people-service-dockerfile-scan
The operation was canceled.
trade-service-dockerfile-scan
The job was canceled because "trade-feed" failed.
trade-service-dockerfile-scan
The operation was canceled.
web-front-end/angular-dockerfile-scan
The job was canceled because "trade-feed" failed.
web-front-end/angular-dockerfile-scan
The operation was canceled.

Artifacts

Produced during runtime
Name Size
Depcheck report dotnet-modules-scan
52.9 KB
Depcheck report gradle-modules-scan account-service
75.1 KB
Depcheck report gradle-modules-scan database
43.5 KB
Depcheck report gradle-modules-scan position-service
75.1 KB
Depcheck report gradle-modules-scan trade-processor
79.3 KB
Depcheck report gradle-modules-scan trade-service
78.9 KB
Depcheck report reference-data
526 KB
Depcheck report trade-feed
162 KB
Depcheck report web-front-end-angular
322 KB
Depcheck report web-front-end-react
1.24 MB