Failed to fetch DB: User cannot be authenticated with the token provided

[aleksandr-vin]

Description

Vuln's DB is not downloaded.

What did you expect to happen?

image scan

What happened instead?

failed

Output of run with -debug:

docker run --rm aquasec/trivy:latest --debug image busybox
2022-06-22T12:07:18.725Z	DEBUG	Severities: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
2022-06-22T12:07:18.728Z	DEBUG	cache dir:  /root/.cache/trivy
2022-06-22T12:07:18.728Z	DEBUG	There is no valid metadata file: unable to open a file: open /root/.cache/trivy/db/metadata.json: no such file or directory
2022-06-22T12:07:18.728Z	INFO	Need to update DB
2022-06-22T12:07:18.728Z	INFO	DB Repository: ghcr.io/aquasecurity/trivy-db
2022-06-22T12:07:18.728Z	INFO	Downloading DB...
2022-06-22T12:07:18.728Z	DEBUG	no metadata file
2022-06-22T12:07:19.652Z	FATAL	DB error:
    github.com/aquasecurity/trivy/pkg/commands/artifact.runWithTimeout
        /home/runner/work/trivy/trivy/pkg/commands/artifact/run.go:87
  - failed to download vulnerability DB:
    github.com/aquasecurity/trivy/pkg/commands/operation.DownloadDB
        /home/runner/work/trivy/trivy/pkg/commands/operation/operation.go:111
  - database download error:
    github.com/aquasecurity/trivy/pkg/db.(*Client).Download
        /home/runner/work/trivy/trivy/pkg/db/db.go:155
  - failed to fetch the layer:
    github.com/aquasecurity/trivy/pkg/oci.Artifact.Download
        /home/runner/work/trivy/trivy/pkg/oci/artifact.go:94
  - GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:5affceed0f4ba4da7954daaba21e8e7e679f8ac2c6e4cbcd6a4b9d97ab55243e: UNAUTHORIZED: unauthenticated: User cannot be authenticated with the token provided.

Output of trivy -v:

Version: 0.29.2
Vulnerability DB:
  Version: 1
  UpdatedAt: 2022-01-19 12:44:54.97531659 +0000 UTC
  NextUpdate: 2022-01-19 18:44:54.97531629 +0000 UTC
  DownloadedAt: 2022-01-19 16:09:18.03537 +0000 UTC```

## Additional details (base image name, container registry info...):

[tecbird]

+1

2022-06-22T12:04:46.721Z INFO Need to update DB
2022-06-22T12:04:46.721Z INFO DB Repository: ghcr.io/aquasecurity/trivy-db
2022-06-22T12:04:46.721Z INFO Downloading DB...
2022-06-22T12:04:47.680Z FATAL init error: DB error: failed to download vulnerability DB: database download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:5affceed0f4ba4da7954daaba21e8e7e679f8ac2c6e4cbcd6a4b9d97ab55243e: UNAUTHORIZED: unauthenticated: User cannot be authenticated with the token provided.

[liad5h]

same here, I am using 0.25.3

[jajaislanina]

+1

Running in github action we get this error
error pulling image configuration: download failed after attempts=1: unauthorized: unauthenticated: User cannot be authenticated with the token provided. na Step 1/5 : FROM [ghcr.io/aquasecurity/trivy:0.29.0](http://ghcr.io/aquasecurity/trivy:0.29.0)

[knqyf263]

Trivy DB is hosted on GitHub Container Registry, but it is unstable nowadays. It sometimes returns an unauthorized error. I believe the error will be addressed in a minute. Please retry your job.

[knqyf263]

See also Homebrew/brew#13460

[knqyf263]

GitHub recognized the issue and updated the status.

https://www.githubstatus.com/

[knqyf263]

Looks like it is back to normal. Please let me close this issue.

https://www.githubstatus.com/incidents/10vm6ctn52gx

[maltemorgenstern]

I can confirm that this is fixed - trivy has no longer issues downloading the database 🎉

INFO	Need to update DB
INFO	DB Repository: ghcr.io/aquasecurity/trivy-db
INFO	Downloading DB...
DEBUG	no metadata file
DEBUG	Updating database metadata...
DEBUG	DB Schema: 2, UpdatedAt: 2022-06-22 12:08:00.619245834 +0000 UTC, NextUpdate: 2022-06-22 18:08:00.619245434 +0000 UTC, DownloadedAt: 2022-06-22 13:10:03.207600357 +0000 UTC

[knqyf263]

Thanks for confirming👍