Github Action is not working anymore #7481

imclem · 2024-09-10T13:02:45Z

imclem
Sep 10, 2024

Description

Running the trivy github actions ends with the following error:
2024-09-10T12:50:02Z FATAL Fatal error image scan error: scan error: scan failed: scan failed: failed to detect vulnerabilities: unable to scan OS packages: failed vulnerability detection of OS packages: failed detection: failed to get Ubuntu advisories: failed to get Ubuntu advisories: failed to unmarshal advisory JSON: json: cannot unmarshal string into Go struct field dbAdvisory.Status of type int

It was working this morning (UTC+2) , but is not working any more (14:57 UTC+2).

Full log:

Run aquasecurity/trivy-action@master
  with:
    image-ref: microservice:develop
    format: table
    exit-code: 1
    ignore-unfixed: true
    vuln-type: os,library
    severity: CRITICAL
    security-checks: vuln
    scan-type: image
    scan-ref: .
    list-all-pkgs: false
  env:
    JAVA_HOME: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/19.0.2-7/x64
    JAVA_HOME_19_X64: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/19.0.2-7/x64
    TRIVY_OFFLINE_SCAN: true
/usr/bin/docker run --name e[3](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:3)e00a828ae[4](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:4)8375cc4682a4ac0424d397ff74_bcf084 --label e3e00a --workdir /github/workspace --rm -e "JAVA_HOME" -e "JAVA_HOME_19_X64" -e "TRIVY_OFFLINE_SCAN" -e "INPUT_IMAGE-REF" -e "INPUT_FORMAT" -e "INPUT_EXIT-CODE" -e "INPUT_IGNORE-UNFIXED" -e "INPUT_VULN-TYPE" -e "INPUT_SEVERITY" -e "INPUT_SECURITY-CHECKS" -e "INPUT_SCAN-TYPE" -e "INPUT_INPUT" -e "INPUT_SCAN-REF" -e "INPUT_TEMPLATE" -e "INPUT_OUTPUT" -e "INPUT_SKIP-DIRS" -e "INPUT_SKIP-FILES" -e "INPUT_CACHE-DIR" -e "INPUT_TIMEOUT" -e "INPUT_IGNORE-POLICY" -e "INPUT_HIDE-PROGRESS" -e "INPUT_LIST-ALL-PKGS" -e "INPUT_SCANNERS" -e "INPUT_TRIVYIGNORES" -e "INPUT_ARTIFACT-TYPE" -e "INPUT_GITHUB-PAT" -e "INPUT_TRIVY-CONFIG" -e "INPUT_TF-VARS" -e "INPUT_LIMIT-SEVERITIES-FOR-SARIF" -e "INPUT_DOCKER-HOST" -e "HOME" -e "GITHUB_JOB" -e "GITHUB_REF" -e "GITHUB_SHA" -e "GITHUB_REPOSITORY" -e "GITHUB_REPOSITORY_OWNER" -e "GITHUB_REPOSITORY_OWNER_ID" -e "GITHUB_RUN_ID" -e "GITHUB_RUN_NUMBER" -e "GITHUB_RETENTION_DAYS" -e "GITHUB_RUN_ATTEMPT" -e "GITHUB_REPOSITORY_ID" -e "GITHUB_ACTOR_ID" -e "GITHUB_ACTOR" -e "GITHUB_TRIGGERING_ACTOR" -e "GITHUB_WORKFLOW" -e "GITHUB_HEAD_REF" -e "GITHUB_BASE_REF" -e "GITHUB_EVENT_NAME" -e "GITHUB_SERVER_URL" -e "GITHUB_API_URL" -e "GITHUB_GRAPHQL_URL" -e "GITHUB_REF_NAME" -e "GITHUB_REF_PROTECTED" -e "GITHUB_REF_TYPE" -e "GITHUB_WORKFLOW_REF" -e "GITHUB_WORKFLOW_SHA" -e "GITHUB_WORKSPACE" -e "GITHUB_ACTION" -e "GITHUB_EVENT_PATH" -e "GITHUB_ACTION_REPOSITORY" -e "GITHUB_ACTION_REF" -e "GITHUB_PATH" -e "GITHUB_ENV" -e "GITHUB_STEP_SUMMARY" -e "GITHUB_STATE" -e "GITHUB_OUTPUT" -e "RUNNER_OS" -e "RUNNER_ARCH" -e "RUNNER_NAME" -e "RUNNER_ENVIRONMENT" -e "RUNNER_TOOL_CACHE" -e "RUNNER_TEMP" -e "RUNNER_WORKSPACE" -e "ACTIONS_RUNTIME_URL" -e "ACTIONS_RUNTIME_TOKEN" -e "ACTIONS_CACHE_URL" -e "ACTIONS_RESULTS_URL" -e GITHUB_ACTIONS=true -e CI=true -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/home/runner/work/_temp/_github_home":"/github/home" -v "/home/runner/work/_temp/_github_workflow":"/github/workflow" -v "/home/runner/work/_temp/_runner_file_commands":"/github/file_commands" -v "/home/runner/work/REDACTED/REDACTED":"/github/workspace" e3e00a:828ae4837[5](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:5)cc4682a4ac0424d397ff74  "-a image" "-b table" "-c " "-d 1" "-e true" "-f os,library" "-g CRITICAL" "-h " "-i microservice:develop" "-j ." "-k " "-l " "-m " "-n " "-o " "-p " "-q " "-r false" "-s " "-t " "-u " "-v " "-x " "-z " "-y "
Running trivy with options: trivy image  --format table --exit-code  1 --ignore-unfixed --vuln-type  os,library --severity  CRITICAL  microservice:develop
Global options:  
2024-09-10T12:49:3[6](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:6)Z	INFO	Need to update DB
2024-09-10T12:49:36Z	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
44.62 MiB / 53.03 MiB [-------------------------------------------------***_________] 84.15% ? p/s ?53.03 MiB / 53.03 MiB [---------------------------------------------------------***] 100.00% ? p/s ?53.03 MiB / 53.03 MiB [---------------------------------------------------------***] 100.00% ? p/s ?53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 14.00 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 14.00 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 14.00 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 13.10 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 13.10 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [--------------------------------------------***] 100.00% 13.10 MiB p/s ETA 0s53.03 MiB / 53.03 MiB [-------------------------------------------------] 100.00% 29.[7](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:7)5 MiB p/s 2.0s2024-09-10T12:49:3[8](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:8)Z	INFO	Vulnerability scanning is enabled
2024-0[9](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:9)-10T12:49:38Z	INFO	Secret scanning is enabled
2024-09-[10](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:10)T12:49:38Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-10T12:49:38Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-09-10T12:49:46Z	INFO	Java DB Repository	repository=ghcr.io/aquasecurity/trivy-java-db:1
2024-09-10T12:49:46Z	INFO	Downloading the Java DB...
8.97 MiB / 642.17 MiB [>_____________________________________________________________] 1.40% ? p/s ?35.12 MiB / 642.17 MiB [-***_________________________________________________________] 5.47% ? p/s ?60.64 MiB / 642.17 MiB [---***_______________________________________________________] 9.44% ? p/s ?90.64 MiB / 642.17 MiB [----***_______________________________________] 14.[11](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:11)% 135.85 MiB p/s ETA 4s117.41 MiB / 642.17 MiB [------***____________________________________] 18.28% 135.85 MiB p/s ETA 3s146.23 MiB / 642.17 MiB [--------***__________________________________] 22.77% 135.85 MiB p/s ETA 3s186.73 MiB / 642.17 MiB [-----------***_______________________________] 29.08% 137.37 MiB p/s ETA 3s232.87 MiB / 642.17 MiB [--------------***____________________________] 36.26% 137.37 MiB p/s ETA 2s282.50 MiB / 642.17 MiB [-----------------***_________________________] 43.99% 137.37 MiB p/s ETA 2s328.31 MiB / 642.17 MiB [---------------------***_____________________] 51.13% 143.70 MiB p/s ETA 2s374.28 MiB / 642.17 MiB [------------------------***__________________] 58.28% 143.70 MiB p/s ETA 1s421.28 MiB / 642.17 MiB [---------------------------***_______________] 65.60% 143.70 MiB p/s ETA 1s468.81 MiB / 642.17 MiB [------------------------------***____________] 73.00% 149.68 MiB p/s ETA 1s517.47 MiB / 642.17 MiB [----------------------------------***________] 80.58% 149.68 MiB p/s ETA 0s567.30 MiB / 642.17 MiB [-------------------------------------***_____] 88.34% 149.68 MiB p/s ETA 0s614.64 MiB / 642.17 MiB [-----------------------------------------***_] 95.71% 155.71 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 155.71 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 155.71 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 148.62 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 148.62 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 148.62 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 139.03 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 139.03 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 139.03 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 130.06 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 130.06 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 130.06 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% [12](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:12)1.67 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 121.67 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 121.67 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 1[13](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:13).82 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 113.82 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 113.82 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 106.48 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 106.48 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [-----------------------------------------***] 100.00% 106.48 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 99.61 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 99.61 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 99.61 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 93.18 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 93.18 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 93.18 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 87.17 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 87.17 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 87.17 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 81.55 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 81.55 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 81.55 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 76.29 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 76.29 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 76.29 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 71.36 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 71.36 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 71.36 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 66.76 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 66.76 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 66.76 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 62.45 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 62.45 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 62.45 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 58.42 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 58.42 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 58.42 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 54.65 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 54.65 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 54.65 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 51.13 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 51.13 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 51.13 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------***] 100.00% 47.83 MiB p/s ETA 0s642.17 MiB / 642.17 MiB [------------------------------------------------] 100.00% 46.01 MiB p/s [14](https://github.com/REDACTED/REDACTED/actions/runs/10792551374/job/29932883797#step:15:14)s2024-09-10T12:50:01Z	INFO	The Java DB is cached for 3 days. If you want to update the database more frequently, "trivy clean --java-db" command clears the DB cache.
2024-09-10T12:50:02Z	INFO	Detected OS	family="ubuntu" version="24.04"
2024-09-10T12:50:02Z	INFO	[ubuntu] Detecting vulnerabilities...	os_version="24.04" pkg_num=121
2024-09-10T12:50:02Z	FATAL	Fatal error	image scan error: scan error: scan failed: scan failed: failed to detect vulnerabilities: unable to scan OS packages: failed vulnerability detection of OS packages: failed detection: failed to get Ubuntu advisories: failed to get Ubuntu advisories: failed to unmarshal advisory JSON: json: cannot unmarshal string into Go struct field dbAdvisory.Status of type int

Desired Behavior

I want to scan images with the github action sucessfully.

Actual Behavior

Scanning fails, making the github actions build fail.

Reproduction Steps

Not sure I'm just trying to scan an image generated from maven using google jib.

Target

None

Scanner

None

Output Format

None

Mode

None

Debug Output

None

Operating System

Github Actions

Version

None

Checklist

Run trivy clean --all
Read the troubleshooting

synack-security · 2024-09-10T13:33:41Z

synack-security
Sep 10, 2024

I'm seeing the same issue.

9 replies

imclem Sep 10, 2024
Author

I've triggered a build too, I'll let you know in a few minutes.

abpicoli1 Sep 10, 2024

Yep, from my side, issue solved :) Thanks :)

knqyf263 Sep 10, 2024
Maintainer

@abpicoli1 Thanks for checking. We're sorry for the inconvenience.

imclem Sep 10, 2024
Author

Ok on my side too. @knqyf263 thanks for fixing that fast !

knqyf263 Sep 10, 2024
Maintainer

Thanks for confirming!

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Github Action is not working anymore #7481

{{title}}

Replies: 1 comment 9 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Github Action is not working anymore #7481

imclem Sep 10, 2024

Description

Desired Behavior

Actual Behavior

Reproduction Steps

Target

Scanner

Output Format

Mode

Debug Output

Operating System

Version

Checklist

Replies: 1 comment · 9 replies

synack-security Sep 10, 2024

imclem Sep 10, 2024 Author

abpicoli1 Sep 10, 2024

knqyf263 Sep 10, 2024 Maintainer

imclem Sep 10, 2024 Author

knqyf263 Sep 10, 2024 Maintainer

imclem
Sep 10, 2024

Replies: 1 comment 9 replies

synack-security
Sep 10, 2024

imclem Sep 10, 2024
Author

knqyf263 Sep 10, 2024
Maintainer

imclem Sep 10, 2024
Author

knqyf263 Sep 10, 2024
Maintainer