0.56.0 init error: DB error: Java DB error: OCI artifact error: failed to download Java DB from any source

[grubjack]

Description

Fatal error on downloading Java DB with Trivy 0.56.0, no issues with Trivy 0.55.2

Desired Behavior

Download Java DB without errors

Actual Behavior

DB error: Java DB error: OCI artifact error: failed to download Java DB from any source

Reproduction Steps

trivy image --download-java-db-only

Target

Container Image

Scanner

Vulnerability

Output Format

None

Mode

Client/Server

Debug Output

$ trivy image --download-java-db-only --debug
2024-10-03T14:30:52Z    DEBUG   No plugins loaded
2024-10-03T14:30:52Z    DEBUG   Default config file "file_path=trivy.yaml" not found, using built in values
2024-10-03T14:30:52Z    DEBUG   Cache dir       dir="/root/.cache/trivy"
2024-10-03T14:30:52Z    DEBUG   Cache dir       dir="/root/.cache/trivy"
2024-10-03T14:30:52Z    DEBUG   Parsed severities       severities=[UNKNOWN LOW MEDIUM HIGH CRITICAL]
2024-10-03T14:30:52Z    DEBUG   Ignore statuses statuses=[]
2024-10-03T14:30:52Z    INFO    [javadb] Downloading Java DB...
2024-10-03T14:30:52Z    INFO    [javadb] Downloading artifact...        repo="ghcr.io/aquasecurity/trivy-java-db:1"
649.13 MiB / 649.13 MiB [---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% 3.27 MiB p/s 3m18s
2024-10-03T14:34:12Z    INFO    [javadb] Artifact successfully downloaded       repo="ghcr.io/aquasecurity/trivy-java-db:1"
2024-10-03T14:34:12Z    FATAL   Fatal error
  - init error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.Run
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:367
  - DB error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.NewRunner
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:119
  - Java DB error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.(*runner).initJavaDB
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:328
  - OCI artifact error:
    github.com/aquasecurity/trivy/pkg/javadb.(*Updater).Update
        /home/runner/work/trivy/trivy/pkg/javadb/client.go:63
  - failed to download Java DB from any source:
    github.com/aquasecurity/trivy/pkg/javadb.(*Updater).downloadDB
        /home/runner/work/trivy/trivy/pkg/javadb/client.go:110

Operating System

Linux

Version

$ trivy --version
Version: 0.56.0

Checklist

• Run trivy clean --all
• Read the troubleshooting

[RimDammak]

i'm encountering something similar to your issue, maybe reviewing this gitlab discussion could help you!