Replies: 7 comments 2 replies
-
hi @mm-chia thanks for the log output, could you please share a minimal reproducible example so we can try to debug? |
Beta Was this translation helpful? Give feedback.
-
Same issue, here is the minimal example:
My environment:
|
Beta Was this translation helpful? Give feedback.
-
Getting similar errors in the log when running trivy on https://github.com/philips-labs/terraform-aws-github-runner/tree/main/examples/default
|
Beta Was this translation helpful? Give feedback.
-
Track #7936 |
Beta Was this translation helpful? Give feedback.
-
Hi, |
Beta Was this translation helpful? Give feedback.
-
Hello! Most of these issues have been resolved in trivy 0.57.1 The resource referenced looks like this:
Are you able to help fixing this, please? Thanks a lot, |
Beta Was this translation helpful? Give feedback.
-
I'm using Trivy 0.57.1, but when scanning the terraform-aws-vpc module, issues still seem to occur.
|
Beta Was this translation helpful? Give feedback.
-
Description
Hello!
We are looking to implement Trivy security scanning for our Tofu (Terraform compatible) code in our organization.
After running
tofu init
, I am running the commandtrivy config .
I am seeing different outputs between Trivy 0.56.0 and 0.57.0, but both show a number of errors.
Using Trivy 0.56.0, I am getting this output:
Using Trivy 0.57.0, I am getting this output:
I'm trying to understand if these errors need to be fixed (a bug in Trivy), or it's something we're doing wrong?
The Tofu code works fine - we can run
plan
andapply
with no issues, in multiple environments.I'd appreciate the help!
thank you,
Desired Behavior
No errors should be shown in the command's output.
Actual Behavior
I am seeing a number of errors and I don't know if they're expected (bad configuration on my side), or they need to be fixed in Trivy.
Reproduction Steps
Target
None
Scanner
None
Output Format
None
Mode
None
Debug Output
trivy config . -debug
(trivy 0.57.0)Version: 0.57.0
Vulnerability DB:
Version: 2
UpdatedAt: 2024-07-16 06:12:15.504204868 +0000 UTC
NextUpdate: 2024-07-16 12:12:15.504204488 +0000 UTC
DownloadedAt: 2024-07-16 07:45:35.009945 +0000 UTC
Check Bundle:
Digest: sha256:ef2d9ad4fce0f933b20a662004d7e55bf200987c180e7f2cd531af631f408bb3
DownloadedAt: 2024-11-15 08:12:35.308129 +0000 UTC
Checklist
trivy clean --all
Beta Was this translation helpful? Give feedback.
All reactions