Replies: 1 comment 2 replies
-
Hello @sedyh You are right. Trivy doesn't support I started checking this case. But I was unable to create an index.json file with two manifests (I only ever get one manifest).
Can you write more precise instructions to get an image similar to yours? Regards, Dmitriy |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Description
Good afternoon, I've downloaded the alpine:3.18.3 image in oci format for arm, but I can’t get trivy to use linux/arm64 arch, which is why it crashes when trying to take the manifest from the first architecture it comes across.
The manifest list has multiple arches.
This is image layout:
The command I use (also tried --platform="linux/arm64/v8" for specific variant, not working):
Trivy wants to check linux/amd64 (ignoring the --platform flag):
But I need it to take lunux/arm64 manifest (which I specified in --platform flag).
Desired Behavior
Trivy should choose b312e4b0e2 manifest when --plaftorm=linux/arm64 is specified.
Actual Behavior
Trivy chooses the first arch it comes across ignoring the flag.
Reproduction Steps
Target
Container Image
Scanner
Vulnerability
Output Format
Table
Mode
Standalone
Debug Output
Operating System
MacOS Sonoma 14
Version
Checklist
trivy image --reset
It will only work if there is only one manifest left in the list which means it can't choose arch properly.
Beta Was this translation helpful? Give feedback.
All reactions