Trivy image with flag ----java-db-repository is adding ":1" to the URL of container repo

[KMikkey]

Description

After use of below command
trivy image -d --java-db-repository gitlab.example.com:4444/app/core-app/trivy-java-db:latest
this error appear
ERROR Unable to initialize the Java DB: Java DB update failed: Java DB update error: DB download error: repository name error (gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1): could not parse reference: gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1

Desired Behavior

Download of java-db from repository.

Actual Behavior

Download of java-db is not possible due to add of ":1" to the URL.

Reproduction Steps

1.
2.
3.
...

Target

Container Image

Scanner

Vulnerability

Output Format

JSON

Mode

Standalone

Debug Output

2024-02-22T14:49:49.707Z	INFO	JAR files found
2024-02-22T14:49:49.707Z	INFO	Java DB Repository: gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1
2024-02-22T14:49:49.707Z	INFO	Downloading the Java DB...
2024-02-22T14:49:49.707Z	ERROR	Unable to initialize the Java DB: Java DB update failed: Java DB update error: DB download error: repository name error (gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1): could not parse reference: gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1
2024-02-22T14:49:49.738Z	FATAL	image scan error:

Operating System

CentOS7

Version

Version: 0.40.0

Checklist

• Run trivy image --reset
• Read the troubleshooting

[KMikkey]

Upgrade of the version didn't solve the issue:

Version: 0.49.0
2024-02-26T13:29:48.561Z	DEBUG	Severities: ["UNKNOWN" "LOW" "MEDIUM" "HIGH" "CRITICAL"]
2024-02-26T13:29:48.571Z	DEBUG	Ignore statuses	{"statuses": null}
2024-02-26T13:29:48.571Z	INFO	Java DB Repository: gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1
2024-02-26T13:29:48.572Z	INFO	Downloading the Java DB...
2024-02-26T13:29:48.572Z	FATAL	init error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.Run
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:417
  - DB error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.NewRunner
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:131
  - Java DB error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.(*runner).initJavaDB
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:336
  - DB download error:
    github.com/aquasecurity/trivy/pkg/javadb.(*Updater).Update
        /home/runner/work/trivy/trivy/pkg/javadb/client.go:63
  - repository name error (gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1):
    github.com/aquasecurity/trivy/pkg/oci.(*Artifact).populate
        /home/runner/work/trivy/trivy/pkg/oci/artifact.go:88
  - could not parse reference: gitlab.example.com:4444/app/core-app/trivy-java-db:latest:1

[DmitriyLewen]

Hello @KMikkey
Thank you for your report!

I created #6218 for this task.

Regards, Dmitriy