Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci(build): fix Trivy TOOMANYREQUESTS error #44

Merged
merged 1 commit into from
Oct 30, 2024
Merged

ci(build): fix Trivy TOOMANYREQUESTS error #44

merged 1 commit into from
Oct 30, 2024

Conversation

mydoomfr
Copy link
Contributor

This PR aims to address the current rate-limiting issue that prevents Trivy to retrieve the database.

Running Trivy with options: trivy image ghcr.io/mydoomfr/powerdns-operator:main
2024-10-29T16:05:02Z	INFO	[vulndb] Need to update DB
2024-10-29T16:05:02Z	INFO	[vulndb] Downloading vulnerability DB...
2024-10-29T16:05:02Z	INFO	[vulndb] Downloading artifact...	repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-29T16:05:02Z	ERROR	[vulndb] Failed to download artifact	repo="ghcr.io/aquasecurity/trivy-db:2" err="OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-db/manifests/2: TOOMANYREQUESTS: retry-after: 571.072µs, allowed: 44000/minute\n\n"
2024-10-29T16:05:02Z	FATAL	Fatal error	init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from any source
Error: Process completed with exit code 1.

See aquasecurity/trivy-action#389

@mydoomfr mydoomfr added the github_actions Pull requests that update GitHub Actions code label Oct 29, 2024
@mydoomfr mydoomfr requested a review from antrema October 29, 2024 21:44
@mydoomfr mydoomfr changed the title CI fix Trivy TOOMANYREQUESTS ci(build): fix Trivy TOOMANYREQUESTS error Oct 29, 2024
@mydoomfr mydoomfr added the dependencies Pull requests that update a dependency file label Oct 29, 2024
antrema
antrema reviewed Oct 30, 2024
View reviewed changes
Copy link
Collaborator

@antrema antrema left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good find

@mydoomfr mydoomfr merged commit da9465a into Orange-OpenSource:main Oct 30, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@antrema antrema antrema approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@mydoomfr @antrema