[Build and Push Preset Models/Scan preset base os image] ⭐ Run Main Run Trivy
[Build and Push Preset Models/Scan preset base os image]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/3-composite-6.sh] user= workdir=
| Running Trivy with options: trivy image test/preset-tfs:latest
| 2025-06-03T07:45:03Z  WARN    [vulndb] Trivy DB may be corrupted and will be re-downloaded. If you manually downloaded DB - use the `--skip-db-update` flag to skip updating DB.
| 2025-06-03T07:45:03Z  INFO    [vulndb] Need to update DB
| 2025-06-03T07:45:03Z  INFO    [vulndb] Downloading vulnerability DB...
| 2025-06-03T07:45:03Z  INFO    [vulndb] Downloading artifact...        repo="public.ecr.aws/aquasecurity/trivy-db:2"
| 
| 2025-06-03T07:45:06Z  INFO    [vulndb] Artifact successfully downloaded       repo="public.ecr.aws/aquasecurity/trivy-db:2"
| 2025-06-03T07:45:06Z  INFO    [vuln] Vulnerability scanning is enabled
| 2025-06-03T07:45:06Z  INFO    [secret] Secret scanning is enabled
| 2025-06-03T07:45:06Z  INFO    [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
| 2025-06-03T07:45:06Z  INFO    [secret] Please see also https://trivy.dev/v0.63/docs/scanner/secret#recommendation for faster secret detection
| 2025-06-03T07:45:10Z  INFO    Detected OS     family="debian" version="12.11"
| 2025-06-03T07:45:10Z  INFO    [debian] Detecting vulnerabilities...   os_version="12" pkg_num=151
| 2025-06-03T07:45:10Z  WARN    Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/v0.63/docs/scanner/vulnerability#severity-selection for details.
| 
| Report Summary
| 
| ┌───────────────────────────────────────┬────────┬─────────────────┬─────────┐
| │                Target                 │  Type  │ Vulnerabilities │ Secrets │
| ├───────────────────────────────────────┼────────┼─────────────────┼─────────┤
| │ test/preset-tfs:latest (debian 12.11) │ debian │        2        │    -    │
| └───────────────────────────────────────┴────────┴─────────────────┴─────────┘
| Legend:
| - '-': Not scanned
| - '0': Clean (no security findings detected)
| 
| 
| For OSS Maintainers: VEX Notice
| --------------------------------
| If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
| VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
| Learn more and start using VEX: https://trivy.dev/v0.63/docs/supply-chain/vex/repo#publishing-vex-documents
| 
| To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.
| 
| 
| test/preset-tfs:latest (debian 12.11)
| 
| Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)
| 
| ┌─────────────┬───────────────┬──────────┬────────┬───────────────────┬──────────────────┬──────────────────────────────────────────────────────┐
| │   Library   │ Vulnerability │ Severity │ Status │ Installed Version │  Fixed Version   │                        Title                         │
| ├─────────────┼───────────────┼──────────┼────────┼───────────────────┼──────────────────┼──────────────────────────────────────────────────────┤
| │ libsystemd0 │ CVE-2025-4598 │ MEDIUM   │ fixed  │ 252.36-1~deb12u1  │ 252.38-1~deb12u1 │ systemd-coredump: race condition that allows a local │
| │             │               │          │        │                   │                  │ attacker to crash a SUID...                          │
| │             │               │          │        │                   │                  │ https://avd.aquasec.com/nvd/cve-2025-4598            │
| ├─────────────┤               │          │        │                   │                  │                                                      │
| │ libudev1    │               │          │        │                   │                  │                                                      │
| │             │               │          │        │                   │                  │                                                      │
| │             │               │          │        │                   │                  │                                                      │
| └─────────────┴───────────────┴──────────┴────────┴───────────────────┴──────────────────┴──────────────────────────────────────────────────────┘
[Build and Push Preset Models/Scan preset base os image]   ❌  Failure - Main Run Trivy [7.137283062s]
[Build and Push Preset Models/Scan preset base os image] exitcode '1': failure
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Main Remove Trivy Envs file
[Build and Push Preset Models/Scan preset base os image]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/3-composite-7.sh] user= workdir=
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Main Remove Trivy Envs file [77.818767ms]
[Build and Push Preset Models/Scan preset base os image]   ❌  Failure - Main Run Trivy vulnerability scanner [16.016759494s]
[Build and Push Preset Models/Scan preset base os image] exitcode '1': failure
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Post Run Trivy vulnerability scanner
[Build and Push Preset Models/Scan preset base os image]   🐳  docker cp src=/home/rob/.cache/act/aquasecurity-trivy-action@master/ dst=/var/run/act/actions/aquasecurity-trivy-action@master/
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Post Install Trivy
[Build and Push Preset Models/Scan preset base os image]   🐳  docker cp src=/home/rob/.cache/act/aquasecurity-setup-trivy@ff1b8b060f23b650436d419b5e13f67f5d4c3087/ dst=/var/run/act/actions/aquasecurity-setup-trivy@ff1b8b060f23b650436d419b5e13f67f5d4c3087/
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Post Checkout install script
[Build and Push Preset Models/Scan preset base os image]   🐳  docker exec cmd=[/opt/acttoolcache/node/18.20.8/x64/bin/node /var/run/act/actions/actions-checkout@v4/dist/index.js] user= workdir=
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Post Checkout install script [155.543207ms]
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Post Restore Trivy binary from cache
[Build and Push Preset Models/Scan preset base os image]   🐳  docker exec cmd=[/opt/acttoolcache/node/18.20.8/x64/bin/node /var/run/act/actions/actions-cache@v4/dist/save/index.js] user= workdir=
| [command]/usr/bin/tar --posix -cf cache.tzst --exclude cache.tzst -P -C /home/rob/go/src/kaito --files-from manifest.txt --use-compress-program zstdmt
| Cache Size: ~40 MB (41869152 B)
| Cache saved successfully
| Cache saved with key: trivy-binary-v0.63.0-Linux-X64
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Post Restore Trivy binary from cache [592.291753ms]
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Post Install Trivy [808.638134ms]
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Post Run Trivy vulnerability scanner [913.457382ms]
[Build and Push Preset Models/Scan preset base os image] ⭐ Run Complete job
[Build and Push Preset Models/Scan preset base os image]   ✅  Success - Complete job
[Build and Push Preset Models/Scan preset base os image] 🏁  Job failed
Error: Job 'Scan preset base os image' failed