trivy repo scan with --format cyclonedx and --server, not working #6924

FranAguiar · 2024-06-13T15:48:46Z

FranAguiar
Jun 13, 2024

Description

I execute this and it generate the sbom json
trivy repo --branch develop --format cyclonedx https://myrepo

But if I run it using a remote server, like this, it generate an empty json report
trivy repo --branch develop --format cyclonedx --server http://localhost:4954 https://myrepo

{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:10324d8f-26dd-4f42-875f-091642999999",
  "version": 1,
  "metadata": {
    "timestamp": "2024-06-13T14:36:16+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.52.0"
        }
      ]
    },
    "component": {
      "bom-ref": "3023c0bf-82bb-4878-8990-re34438c9198",
      "type": "application",
      "name": "https://myrepo",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ]
    }
  },
  "components": [],
  "dependencies": [
    {
      "ref": "3023c0bf-82bb-4878-8990-re34438c9198",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}

Desired Behavior

Generate the sbom with the remote server as in local

Actual Behavior

Create an empty report

Reproduction Steps

Install trivy helm chart and run command above agains it

Target

Git Repository

Scanner

None

Output Format

CycloneDX

Mode

Client/Server

Debug Output

Total 297 (delta 103), reused 113 (delta 27), pack-reused 0 (from 0)
2024-06-13T16:37:55+01:00	DEBUG	[nuget] The nuget packages directory couldn't be found. License search disabled
2024-06-13T16:37:55+01:00	DEBUG	Skipping path	path=".git"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.com.myproject.meta:myproject-bom:0.3.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.com.myproject.meta:myproject-bom:0.3.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-stack-depchain" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-stack:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="vertx-snapshots-repository" url="https://s01.oss.sonatype.org/content/repositories/snapshots/"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-stack:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-dependencies" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-bom" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson" artifact_id="jackson-bom" version="2.15.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml:oss-parent:50"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml:oss-parent:50"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-bom" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.protobuf" artifact_id="protobuf-bom" version="3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.apache.camel" artifact_id="camel-bom" version="3.21.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.camel:camel:3.21.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache:apache:29"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache:apache:29"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.camel:camel:3.21.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-bom" version="4.1.96.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlinx" artifact_id="kotlinx-coroutines-bom" version="1.8.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlin" artifact_id="kotlin-bom" version="1.9.22"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.arrow-kt" artifact_id="arrow-stack" version="1.2.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlin" artifact_id="kotlin-reflect" version="1.9.22"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="info.picocli" artifact_id="picocli" version="4.7.4"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="ch.qos.logback" artifact_id="logback-classic" version="1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="ch.qos.logback:logback-parent:1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="ch.qos.logback:logback-parent:1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.lettuce" artifact_id="lettuce-core" version="6.2.6.RELEASE"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson.module" artifact_id="jackson-module-kotlin" version="2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="snapshots-repo" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-bom:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-bom:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson.datatype" artifact_id="jackson-datatype-jsr310" version="2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson.module:jackson-modules-java8:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson.module:jackson-modules-java8:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jdbi" artifact_id="jdbi3-kotlin-sqlobject" version="3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.basepom:basepom8-oss:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.basepom:basepom8-minimal:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.basepom:basepom8-foundation:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.basepom:basepom8-foundation:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.basepom:basepom8-minimal:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.basepom:basepom8-oss:33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson" artifact_id="jackson-bom" version="2.10.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-parent:2.10"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml:oss-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml:oss-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-parent:2.10"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="mysql" artifact_id="mysql-connector-java" version="8.0.33"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.mchange" artifact_id="c3p0" version="0.9.5.5"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.apache.httpcomponents" artifact_id="httpclient" version="4.5.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.httpcomponents:httpcomponents-client:4.5.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.httpcomponents:httpcomponents-parent:11"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache:apache:21"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache:apache:21"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.httpcomponents:httpcomponents-parent:11"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.httpcomponents:httpcomponents-client:4.5.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="javax.annotation" artifact_id="javax.annotation-api" version="1.3.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="net.java:jvnet-parent:3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="jvnet-nexus-snapshots" url="https://maven.java.net/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="net.java:jvnet-parent:3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlinx" artifact_id="kotlinx-coroutines-core" version="1.8.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-kotlin-stub" version="1.4.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-protobuf" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.protobuf" artifact_id="protobuf-kotlin" version="3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.protobuf:protobuf-parent:3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.protobuf:protobuf-parent:3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="protoc-gen-grpc-kotlin" version="1.4.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-netty" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-core" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-lang-kotlin" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-lang-kotlin-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-lang-kotlin-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-lang-kotlin-coroutines" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-lang-kotlin-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-lang-kotlin-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-parent:19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web-openapi" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web-openapi-router" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-auth-common" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-auth-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-auth-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web-api-contract" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlin" artifact_id="kotlin-stdlib" version="1.9.22"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="ch.qos.logback" artifact_id="logback-core" version="1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="ch.qos.logback:logback-parent:1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="ch.qos.logback:logback-parent:1.4.12"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.slf4j" artifact_id="slf4j-api" version="2.0.7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.slf4j:slf4j-parent:2.0.7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.slf4j:slf4j-parent:2.0.7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-common" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-handler" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-transport" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.projectreactor" artifact_id="reactor-core" version="3.4.32"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson.core" artifact_id="jackson-databind" version="2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.junit" artifact_id="junit-bom" version="5.9.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson.core" artifact_id="jackson-annotations" version="2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="sonatype-nexus-snapshots" url="https://oss.sonatype.org/content/repositories/snapshots"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-parent:2.15"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.fasterxml.jackson.core" artifact_id="jackson-core" version="2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.fasterxml.jackson:jackson-base:2.15.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains" artifact_id="annotations" version="13.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jdbi" artifact_id="jdbi3-core" version="3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jdbi" artifact_id="jdbi3-kotlin" version="3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jdbi" artifact_id="jdbi3-sqlobject" version="3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.jdbi:jdbi3-parent:3.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.mchange" artifact_id="mchange-commons-java" version="0.2.19"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.apache.httpcomponents" artifact_id="httpcore" version="4.4.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.httpcomponents:httpcomponents-core:4.4.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.httpcomponents:httpcomponents-parent:11"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.httpcomponents:httpcomponents-parent:11"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.httpcomponents:httpcomponents-core:4.4.13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="commons-logging" artifact_id="commons-logging" version="1.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.commons:commons-parent:34"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache:apache:13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache:apache:13"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.commons:commons-parent:34"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="commons-codec" artifact_id="commons-codec" version="1.16.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.commons:commons-parent:58"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache:apache:29"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache:apache:29"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.commons:commons-parent:58"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.junit" artifact_id="junit-bom" version="5.9.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlinx" artifact_id="kotlinx-coroutines-core-jvm" version="1.8.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-stub" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-api" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.code.findbugs" artifact_id="jsr305" version="3.0.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.protobuf" artifact_id="protobuf-java" version="3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.protobuf:protobuf-parent:3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.protobuf:protobuf-parent:3.24.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.api.grpc" artifact_id="proto-google-common-protos" version="2.17.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-protobuf-lite" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.guava" artifact_id="guava" version="32.1.2-jre"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.guava:guava-parent:32.1.2-jre"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.guava:guava-parent:32.1.2-jre"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-core" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-codec-http2" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-handler-proxy" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.errorprone" artifact_id="error_prone_annotations" version="2.18.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.errorprone:error_prone_parent:2.18.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.errorprone:error_prone_parent:2.18.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.perfmark" artifact_id="perfmark-api" version="0.26.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-transport-native-unix-common" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-buffer" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-codec-http" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-resolver" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-resolver-dns" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlin" artifact_id="kotlin-stdlib-jdk8" version="1.9.22"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web-common" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-bridge-common" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-web-validation" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-web-parent:4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-json-schema" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.yaml" artifact_id="snakeyaml" version="2.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.vertx" artifact_id="vertx-openapi" version="4.5.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.vertx:vertx-ext-parent:38"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.networknt" artifact_id="json-schema-validator" version="1.0.43"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="jakarta.xml.bind" artifact_id="jakarta.xml.bind-api" version="2.3.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="jakarta.xml.bind:jakarta.xml.bind-api-parent:2.3.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.eclipse.ee4j:project:1.0.6"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.eclipse.ee4j:project:1.0.6"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="jakarta.xml.bind:jakarta.xml.bind-api-parent:2.3.3"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-codec" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.reactivestreams" artifact_id="reactive-streams" version="1.0.4"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.antlr" artifact_id="antlr4-runtime" version="4.7.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.antlr:antlr4-master:4.7.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.antlr:antlr4-master:4.7.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.leangen.geantyref" artifact_id="geantyref" version="1.3.7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.github.ben-manes.caffeine" artifact_id="caffeine" version="2.8.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.grpc" artifact_id="grpc-context" version="1.56.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.guava" artifact_id="failureaccess" version="1.0.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.guava:guava-parent:26.0-android"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.guava:guava-parent:26.0-android"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.guava" artifact_id="listenablefuture" version="9999.0-empty-to-avoid-conflict-with-guava"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.guava:guava-parent:26.0-android"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.guava:guava-parent:26.0-android"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.checkerframework" artifact_id="checker-qual" version="3.33.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.j2objc" artifact_id="j2objc-annotations" version="2.8"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:9"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.code.gson" artifact_id="gson" version="2.10.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.google.code.gson:gson-parent:2.10.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.google.code.gson:gson-parent:2.10.1"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="com.google.android" artifact_id="annotations" version="4.1.1.4"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.codehaus.mojo" artifact_id="animal-sniffer-annotations" version="1.23"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.codehaus.mojo:animal-sniffer-parent:1.23"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.codehaus.mojo:mojo-parent:74"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.codehaus.mojo:mojo-parent:74"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.codehaus.mojo:animal-sniffer-parent:1.23"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-codec-socks" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="io.netty" artifact_id="netty-codec-dns" version="4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="io.netty:netty-parent:4.1.103.Final"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jetbrains.kotlin" artifact_id="kotlin-stdlib-jdk7" version="1.9.22"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.apache.commons" artifact_id="commons-lang3" version="3.13.0"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.apache.commons:commons-parent:58"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.apache.commons:commons-parent:58"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jruby.joni" artifact_id="joni" version="2.1.31"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Adding repository	id="codehaus" url="http://repository.codehaus.org"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="jakarta.activation" artifact_id="jakarta.activation-api" version="1.2.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="com.sun.activation:all:1.2.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.eclipse.ee4j:project:1.0.6"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.eclipse.ee4j:project:1.0.6"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="com.sun.activation:all:1.2.2"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Resolving...	group_id="org.jruby.jcodings" artifact_id="jcodings" version="1.0.46"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Start parent	artifact="org.sonatype.oss:oss-parent:7"
2024-06-13T16:37:55+01:00	DEBUG	[pom] Exit parent	artifact="org.sonatype.oss:oss-parent:7"
{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:10324d8f-26dd-4f42-875f-091642999999",
  "version": 1,
  "metadata": {
    "timestamp": "2024-06-13T14:36:16+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.52.0"
        }
      ]
    },
    "component": {
      "bom-ref": "3023c0bf-82bb-4878-8990-re34438c9198",
      "type": "application",
      "name": "https://myrepo",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ]
    }
  },
  "components": [],
  "dependencies": [
    {
      "ref": "3023c0bf-82bb-4878-8990-re34438c9198",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}

Operating System

Trivy docker image 0.52.1 and 0.52.0

Version

Version: 0.52.0
Vulnerability DB:
  Version: 2
  UpdatedAt: 2024-06-13 06:11:38.07539382 +0000 UTC
  NextUpdate: 2024-06-13 12:11:38.075393419 +0000 UTC
  DownloadedAt: 2024-06-13 11:45:30.039736 +0000 UTC
Java DB:
  Version: 1
  UpdatedAt: 2024-06-06 01:04:40.018607299 +0000 UTC
  NextUpdate: 2024-06-09 01:04:40.018607128 +0000 UTC
  DownloadedAt: 2024-06-06 13:21:54.067988 +0000 UTC
Check Bundle:
  Digest: sha256:cfb65621a1f55d9d099c4c28931b252716fcda8bba5081eb43f1001668e79d85
  DownloadedAt: 2024-06-06 13:44:01.426275 +0000 UTC

The server was installed with the helm chart, as explained in the docs:ç
https://aquasecurity.github.io/trivy/v0.18.3/installation/

Checklist

Run trivy image --reset
Read the troubleshooting

Answered by FranAguiar

Jun 14, 2024

Hi, you are right, yesterday after write this I check the version installed by the chart and is very old, I though it was the last
So, fixed...

  image:
    tag: 0.52.1

View full answer

DmitriyLewen · 2024-06-14T03:50:52Z

DmitriyLewen
Jun 14, 2024
Maintainer

Hello @FranAguiar
Thanks for your report!

The server was installed with the helm chart, as explained in the docs:ç
https://aquasecurity.github.io/trivy/v0.18.3/installation/

Can you check Trivy version?
It looks like you use different versions for server and client.

Trivy works correctly for me:

➜  6924 trivy repo --server http://localhost:8080 -f cyclonedx https://github.com/aquasecurity/go-version.git | grep bom-ref
2024-06-14T09:48:20+06:00	INFO	"--format cyclonedx" disables security scanning. Specify "--scanners vuln" explicitly if you want to include vulnerabilities in the CycloneDX report.
      "bom-ref": "cf86d001-ca8c-43b0-a6c2-133fae8dd77a",
      "bom-ref": "d290af04-3905-45a0-9800-bf7f4e54f5a2",
      "bom-ref": "pkg:golang/github.com/aquasecurity/go-version",
      "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/[email protected]",
      "bom-ref": "pkg:golang/github.com/davecgh/[email protected]",
      "bom-ref": "pkg:golang/github.com/pmezard/[email protected]",
      "bom-ref": "pkg:golang/github.com/russross/blackfriday/[email protected]",
      "bom-ref": "pkg:golang/github.com/shurcool/[email protected]",
      "bom-ref": "pkg:golang/github.com/stretchr/[email protected]",
      "bom-ref": "pkg:golang/github.com/urfave/cli/[email protected]",
      "bom-ref": "pkg:golang/golang.org/x/[email protected]",
      "bom-ref": "pkg:golang/gopkg.in/[email protected]",

Regards, Dmitriy

0 replies

FranAguiar · 2024-06-14T06:32:46Z

FranAguiar
Jun 14, 2024
Author

Hi, you are right, yesterday after write this I check the version installed by the chart and is very old, I though it was the last
So, fixed...

  image:
    tag: 0.52.1

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

trivy repo scan with --format cyclonedx and --server, not working #6924

{{title}}

Replies: 2 comments

{{title}}

{{title}}

Select a reply

trivy repo scan with --format cyclonedx and --server, not working #6924

FranAguiar Jun 13, 2024

Description

Desired Behavior

Actual Behavior

Reproduction Steps

Target

Scanner

Output Format

Mode

Debug Output

Operating System

Version

Checklist

Replies: 2 comments

DmitriyLewen Jun 14, 2024 Maintainer

FranAguiar Jun 14, 2024 Author

FranAguiar
Jun 13, 2024

DmitriyLewen
Jun 14, 2024
Maintainer

FranAguiar
Jun 14, 2024
Author