Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trivy analyzer can't detect SLES OS #4051

Open
2 tasks done
PaulRitzkat0110 opened this issue Aug 8, 2024 · 1 comment
Open
2 tasks done

Trivy analyzer can't detect SLES OS #4051

PaulRitzkat0110 opened this issue Aug 8, 2024 · 1 comment
Labels
defect Something isn't working help wanted Extra attention is needed in triage integration/trivy Related to the Trivy integration

Comments

@PaulRitzkat0110
Copy link

Current Behavior

Uploading sboms generated with trivy 0.53 for SLES 12.5 and 15.x can't be scanned by the trivy analyzer, because the OS is not detected by trivy, trivy 0.53 server log:

INFO	Detected OS	family="none" version=""
WARN	Unsupported os	family="none"
INFO	Number of language-specific files	num=0

dtrack-logs-2024-08-08 17_28_28.txt

Steps to Reproduce

  1. upload a trivy generated sbom with SLES 12.5 or 15.x OS packages: trivy.json
  2. have dtrack configured to analyze with trivy
  3. no OS dectected by trivy, no vulns in dtrack: 403cb7b7-81b6-4ffd-bbbb-dd910ea39249-withVulnerabilities.cdx.json

Expected Behavior

OS is set correctly by dtrack and discovered by trivy, like it does for example for redhat, and vulns are reported back to dtrack

Dependency-Track Version

4.11.5

Dependency-Track Distribution

Container Image

Database Server

H2

Database Server Version

No response

Browser

N/A

Checklist

@PaulRitzkat0110 PaulRitzkat0110 added defect Something isn't working in triage labels Aug 8, 2024
@PaulRitzkat0110 PaulRitzkat0110 changed the title Trivy analyzer can Trivy analyzer can't detect SLES OS Aug 8, 2024
@nscuro nscuro added help wanted Extra attention is needed integration/trivy Related to the Trivy integration labels Aug 8, 2024
@cyrilfantin
Copy link

Hi

I have the same issue for trivy 0.54, dtrack 4.11.7 and amazon linux2.
If i try directly trivy server has the correct platform :
Detected OS family="amazon" version="2 (Karoo)" [amazon] Detecting vulnerabilities... os_version="2" pkg_num=117

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
defect Something isn't working help wanted Extra attention is needed in triage integration/trivy Related to the Trivy integration
Projects
None yet
Development

No branches or pull requests

3 participants