-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Closed
aquasecurity/trivy-action
#277Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.scan/vulnerabilityIssues relating to vulnerability scanningIssues relating to vulnerability scanning
Description
Description
Trivy downloads trivy-java-db multiple times in one run:
➜ trivy image tomcat
2023-10-25T09:25:14.383+0600 INFO Need to update DB
2023-10-25T09:25:14.383+0600 INFO DB Repository: ghcr.io/aquasecurity/trivy-db
2023-10-25T09:25:14.383+0600 INFO Downloading DB...
40.64 MiB / 40.64 MiB [-----------------------------------------------------------------------------------------------------] 100.00% 17.98 MiB p/s 2.5s
2023-10-25T09:25:18.340+0600 INFO Vulnerability scanning is enabled
2023-10-25T09:25:18.340+0600 INFO Secret scanning is enabled
2023-10-25T09:25:18.340+0600 INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-10-25T09:25:18.340+0600 INFO Please see also https://aquasecurity.github.io/trivy/v0.46/docs/scanner/secret/#recommendation for faster secret detection
2023-10-25T09:25:25.819+0600 INFO JAR files found
2023-10-25T09:25:25.819+0600 INFO Java DB Repository: ghcr.io/aquasecurity/trivy-java-db:1
2023-10-25T09:25:25.819+0600 INFO Downloading the Java DB...
2.83 MiB / 473.79 MiB [>__________________________________________________________________________________________________] 0.60% 2.08 MiB p/s ETA 3m46s2023-10-25T09:25:29.013+0600 INFO JAR files found
2023-10-25T09:25:29.013+0600 INFO Java DB Repository: ghcr.io/aquasecurity/trivy-java-db:1
2023-10-25T09:25:29.013+0600 INFO Downloading the Java DB...
369.34 MiB / 473.79 MiB [--------------------------------------------------------------------------->_____________________] 77.96% 1.51 MiB p/s ETA 1m
maartengo and trapeznikov
Metadata
Metadata
Assignees
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.scan/vulnerabilityIssues relating to vulnerability scanningIssues relating to vulnerability scanning