Comments (3)
sidarmawan
commented on June 13, 2024
1
Thank you, work for me.
from harbor-scanner-trivy.
danielpacak
commented on June 13, 2024
Hey @heww How do you run/install the Trivy adapter service?
- Is it with Docker or Helm?
- Docker on Linux or Docker for Mac?
- Are you using the official image that we publish to Docker Hub
docker.io/aquasec/harbor-scanner-trivy:0.8.0or the one based on PhotonOS 2.0, i.e.goharbor/trivy-adapter-photon:dev? - What's the permission of
/data/trivy-adapter/trivy/db/trivy.db?
The adapter service is run as non-privileged user 1000 or 10000 depending on whether you use docker.io/aquasec/harbor-scanner-trivy:0.8.0 or goharbor/trivy-adapter-photon:dev. (BTW, I'll make it consistent, but it's not that relevant anyway.)
If you run docker with volume mounts as a root user, trivy adapter doesn't have enough privileges to read/write to/from mount location /home/scanner/.cache/trivy/db/trivy.db
So what's missing is some kind of:
$ chown -R 1000:1000 /data/trivy-adapter/
$ chown -R 10000:10000 /data/trivy-adapter
or
$ chmod a+rwx /data/trivy-adapter
from harbor-scanner-trivy.
danielpacak
commented on June 13, 2024
Cannot reproduce this one. Please reopen if the problem persists.
from harbor-scanner-trivy.
Related Issues (20)
- harbor integration trivy report Unhealthy
- Missing attribute preferred_cvss in the report json
- File containing the security issue (target) is not stored
- Trivy cache is growing too fast
- Scan report is missing the binary related to vulnerability HOT 1
- the length of usernames and passwords must match with 2.8.2 HOT 8
- About vulnerabilities [email protected] on image docker
- mkdir /home/scanner/.cache/trivy/fanal: permission denied HOT 1
- ERROR: column t0.critical_cnt does not exist HOT 1
- It does not work when scan java program HOT 1
- Trivy status goes unhealthy during the scan
- how to skip java db update when scanning start
- Allow image layer cache (fanal.db) to be stored in Redis HOT 1
- Trivy scan results are not up to date HOT 1
- Trivy redis connection support redis TLS mode HOT 3
- the helm repo has a bogus release with version 0.31.0 HOT 5
- Allow disable metrics api
- Add private repo environment variable
- /api/v1/scan API should return 400 to the client when the enabled_capabilities.produces_mime_types not specified HOT 1
- /api/v1/scan/{scan_request_id}/report should send http 400 when the sbom_media_type is missed for sbom scan HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from harbor-scanner-trivy.