ERROR [rego] Error occurred while parsing #8630

ktzsolt · 2025-03-27T17:17:24Z

ktzsolt
Mar 27, 2025

Description

Since 0.60.0 I am getting the following errors when scanning helm charts with trivy config myhelmchart

2025-03-27T12:18:54Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-03-27T12:18:55Z	ERROR	[rego] Error occurred while parsing. Trying to fallback to embedded check	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:18:55Z	ERROR	[rego] Failed to find embedded check, skipping	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego"
2025-03-27T12:18:55Z	ERROR	[rego] Error occurred while parsing	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:19:09Z	ERROR	[rego] Error occurred while parsing. Trying to fallback to embedded check	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:19:09Z	ERROR	[rego] Failed to find embedded check, skipping	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego"
2025-03-27T12:19:09Z	ERROR	[rego] Error occurred while parsing	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"

Desired Behavior

No rego errors in log

Actual Behavior

2025-03-27T12:18:54Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-03-27T12:18:55Z	ERROR	[rego] Error occurred while parsing. Trying to fallback to embedded check	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:18:55Z	ERROR	[rego] Failed to find embedded check, skipping	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego"
2025-03-27T12:18:55Z	ERROR	[rego] Error occurred while parsing	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:19:09Z	ERROR	[rego] Error occurred while parsing. Trying to fallback to embedded check	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T12:19:09Z	ERROR	[rego] Failed to find embedded check, skipping	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego"
2025-03-27T12:19:09Z	ERROR	[rego] Error occurred while parsing	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="root/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"

Reproduction Steps

1. trivy config myhelmchart

Target

Kubernetes

Scanner

Misconfiguration

Output Format

Table

Mode

Standalone

Debug Output

$ trivy config . --debug

2025-03-27T18:09:52+01:00       DEBUG   No plugins loaded
2025-03-27T18:09:52+01:00       DEBUG   Default config file "file_path=trivy.yaml" not found, using built in values
2025-03-27T18:09:52+01:00       DEBUG   Cache dir       dir="/home/ktzsolt/.cache/trivy"
2025-03-27T18:09:52+01:00       DEBUG   Cache dir       dir="/home/ktzsolt/.cache/trivy"
2025-03-27T18:09:52+01:00       DEBUG   Parsed severities       severities=[UNKNOWN LOW MEDIUM HIGH CRITICAL]
2025-03-27T18:09:52+01:00       INFO    [misconfig] Misconfiguration scanning is enabled
2025-03-27T18:09:52+01:00       DEBUG   [misconfig] Loading check bundle        repository="mirror.gcr.io/aquasec/trivy-checks:1"
2025-03-27T18:09:53+01:00       INFO    [misconfig] Need to update the built-in checks
2025-03-27T18:09:53+01:00       INFO    [misconfig] Downloading the built-in checks...
141.27 KiB / 141.27 KiB [-----------------------------------------------------------------------------------------------------------------------------] 100.00% ? p/s 100ms
2025-03-27T18:09:53+01:00       DEBUG   [misconfig] Digest of the built-in checks       digest="sha256:437134e8209404eb494ebc1caa8d0c14c02eb51e6b5b6bd7a836ecd7f0901b19"
2025-03-27T18:09:53+01:00       DEBUG   [misconfig] Checks successfully loaded from disk
2025-03-27T18:09:53+01:00       DEBUG   Enabling misconfiguration scanners      scanners=[azure-arm cloudformation dockerfile helm kubernetes terraform terraformplan-json terraformplan-snapshot]
2025-03-27T18:09:53+01:00       DEBUG   Initializing scan cache...      type="memory"
2025-03-27T18:09:53+01:00       DEBUG   [fs] Analyzing...       root="."
2025-03-27T18:09:53+01:00       DEBUG   [misconfig] Scanning files for misconfigurations...     scanner="Kubernetes"
2025-03-27T18:09:53+01:00       DEBUG   [rego] Overriding filesystem for checks
2025-03-27T18:09:53+01:00       DEBUG   [rego] Embedded libraries are loaded    count=17
2025-03-27T18:09:53+01:00       DEBUG   [rego] Embedded checks are loaded       count=517
2025-03-27T18:09:54+01:00       DEBUG   [rego] Checks from disk are loaded      count=533
2025-03-27T18:09:54+01:00       DEBUG   [rego] Overriding filesystem for data
2025-03-27T18:09:54+01:00       ERROR   [rego] Error occurred while parsing. Trying to fallback to embedded check       file_path="home/ktzsolt/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="home/ktzsolt/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"
2025-03-27T18:09:54+01:00       ERROR   [rego] Failed to find embedded check, skipping  file_path="home/ktzsolt/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego"
2025-03-27T18:09:54+01:00       ERROR   [rego] Error occurred while parsing     file_path="home/ktzsolt/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego" err="home/ktzsolt/.cache/trivy/policy/content/policies/cloud/policies/aws/ec2/specify_ami_owners.rego:30: rego_type_error: undefined ref: input.aws.ec2.requestedamis[__local622__]\n\tinput.aws.ec2.requestedamis[__local622__]\n\t              ^\n\t              have: \"requestedamis\"\n\t              want (one of): [\"instances\" \"launchconfigurations\" \"launchtemplates\" \"networkacls\" \"securitygroups\" \"subnets\" \"volumes\" \"vpcs\"]"

---
Rest of the log is removed

Operating System

ubuntu

Version

Version: 0.60.0
Vulnerability DB:
  Version: 2
  UpdatedAt: 2025-03-26 12:18:52.268822125 +0000 UTC
  NextUpdate: 2025-03-27 12:18:52.268821925 +0000 UTC
  DownloadedAt: 2025-03-26 17:18:41.008434334 +0000 UTC
Java DB:
  Version: 1
  UpdatedAt: 2025-03-22 04:07:47.727778888 +0000 UTC
  NextUpdate: 2025-03-25 04:07:47.727778638 +0000 UTC
  DownloadedAt: 2025-03-26 17:20:44.94887349 +0000 UTC
Check Bundle:
  Digest: sha256:437134e8209404eb494ebc1caa8d0c14c02eb51e6b5b6bd7a836ecd7f0901b19
  DownloadedAt: 2025-03-27 17:09:53.325059247 +0000 UTC

Checklist

Run trivy clean --all
Read the troubleshooting

simar7 · 2025-03-28T01:53:28Z

simar7
Mar 28, 2025
Maintainer

dupe #8625

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ERROR [rego] Error occurred while parsing #8630

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

ERROR [rego] Error occurred while parsing #8630

Uh oh!

Uh oh!

ktzsolt Mar 27, 2025

Description

Desired Behavior

Actual Behavior

Reproduction Steps

Target

Scanner

Output Format

Mode

Debug Output

Operating System

Version

Checklist

Replies: 1 comment

Uh oh!

simar7 Mar 28, 2025 Maintainer

ktzsolt
Mar 27, 2025

simar7
Mar 28, 2025
Maintainer