You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Task Description
We are encountering a rate-limiting error when downloading the Trivy vulnerability DB from ghcr.io during the image creation process for Greenhouse and Supernova in our GitHub Actions workflows.
Sub-tasks
Investigate and fix the rate-limiting error that occurs when downloading the Trivy vulnerability DB (ghcr.io/aquasecurity/trivy-db) in the GitHub Actions pipeline for Greenhouse and Supernova images.
Implement the proposed fix from this issue comment, which suggests adding the ACTIONS_RUNTIME_TOKEN environment variable to bypass the rate-limiting issue.
Ensure that the Trivy DB download process works without hitting the rate limit, and monitor if the error is resolved.
Running Trivy with options: trivy image ghcr.io/cloudoperators/juno-app-greenhouse:latest
2024-11-15T11:50:55Z INFO [vulndb] Need to update DB
2024-11-15T11:50:55Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T11:50:55Z INFO [vulndb] Downloading artifact... repo="ghcr.io/aquasecurity/trivy-db:2"
2024-11-15T11:50:55Z ERROR [vulndb] Failed to download artifact repo="ghcr.io/aquasecurity/trivy-db:2" err="OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-db/manifests/2: TOOMANYREQUESTS: retry-after: 994.324µs, allowed: 44000/minute\n\n"
2024-11-15T11:50:55Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from any source
The text was updated successfully, but these errors were encountered:
Task Description
We are encountering a rate-limiting error when downloading the Trivy vulnerability DB from ghcr.io during the image creation process for Greenhouse and Supernova in our GitHub Actions workflows.
Sub-tasks
ghcr.io/aquasecurity/trivy-db
) in the GitHub Actions pipeline for Greenhouse and Supernova images.ACTIONS_RUNTIME_TOKEN
environment variable to bypass the rate-limiting issue.Additional Context
The text was updated successfully, but these errors were encountered: