Run Image Scan for Amazon CloudWatch Observability Helm Chart #53
the-mannamazon-cloudwatch-observability-image-scan.yaml
on: workflow_dispatch
Matrix: ContainerImageScan
Annotations
8 errors and 12 warnings
|
ContainerImageScan (.neuronMonitor.image.repositoryDomainMap.public, .neuronMonitor.image.reposit...
2024-12-03T18:46:15Z INFO [vulndb] Need to update DB
2024-12-03T18:46:15Z INFO [vulndb] Downloading vulnerability DB...
2024-12-03T18:46:15Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2"
2024-12-03T18:46:17Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from mirror.gcr.io/aquasec/trivy-db:2: oci download error: failed to fetch the layer: GET https://mirror.gcr.io/v2/aquasec/trivy-db/blobs/sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a: BLOB_UNKNOWN: Unknown blob: sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a
|
|
ContainerImageScan (.manager.image.repositoryDomainMap.public, .manager.image.repository, .manage...
2024-12-03T18:46:17Z INFO [vulndb] Need to update DB
2024-12-03T18:46:17Z INFO [vulndb] Downloading vulnerability DB...
2024-12-03T18:46:17Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2"
2024-12-03T18:46:19Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from mirror.gcr.io/aquasec/trivy-db:2: oci download error: failed to fetch the layer: GET https://mirror.gcr.io/v2/aquasec/trivy-db/blobs/sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a: BLOB_UNKNOWN: Unknown blob: sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a
|
|
ContainerImageScan (.agent.image.repositoryDomainMap.public, .agent.image.repository, .agent.imag...
2024-12-03T18:46:17Z INFO [vulndb] Need to update DB
2024-12-03T18:46:17Z INFO [vulndb] Downloading vulnerability DB...
2024-12-03T18:46:17Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2"
2024-12-03T18:46:18Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from mirror.gcr.io/aquasec/trivy-db:2: oci download error: failed to fetch the layer: GET https://mirror.gcr.io/v2/aquasec/trivy-db/blobs/sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a: BLOB_UNKNOWN: Unknown blob: sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a
|
|
ContainerImageScan (.dcgmExporter.image.repositoryDomainMap.public, .dcgmExporter.image.repositor...
2024-12-03T18:46:19Z INFO [vulndb] Need to update DB
2024-12-03T18:46:19Z INFO [vulndb] Downloading vulnerability DB...
2024-12-03T18:46:19Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2"
2024-12-03T18:46:20Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from mirror.gcr.io/aquasec/trivy-db:2: oci download error: failed to fetch the layer: GET https://mirror.gcr.io/v2/aquasec/trivy-db/blobs/sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a: BLOB_UNKNOWN: Unknown blob: sha256:091a07a2add2ec3fc0605fd2b57fb265cf7a79ac70a39b5dedfde1588329c24a
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
CVE-2024-48957 - HIGH severity - libarchive: Out-of-bounds access in libarchive's archive file handling vulnerability in libarchive
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
CVE-2024-48958 - HIGH severity - libarchive: Out-of-bounds access in libarchive's RAR file handling vulnerability in libarchive
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
Process completed with exit code 2.
|
|
ContainerImageScan (.neuronMonitor.image.repositoryDomainMap.public, .neuronMonitor.image.reposit...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.image.repositoryDomainMap.public, .manager.image.repository, .manage...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.agent.image.repositoryDomainMap.public, .agent.image.repository, .agent.imag...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.dcgmExporter.image.repositoryDomainMap.public, .dcgmExporter.image.repositor...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.autoInstrumentationImage.dotnet.repositoryDomain, .manager.autoInstr...
Dockerfile not provided. Skipping sarif scan result.
|
|
ContainerImageScan (.manager.autoInstrumentationImage.nodejs.repositoryDomain, .manager.autoInstr...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.autoInstrumentationImage.nodejs.repositoryDomain, .manager.autoInstr...
Dockerfile not provided. Skipping sarif scan result.
|
|
ContainerImageScan (.manager.autoInstrumentationImage.python.repositoryDomain, .manager.autoInstr...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.autoInstrumentationImage.python.repositoryDomain, .manager.autoInstr...
Dockerfile not provided. Skipping sarif scan result.
|
|
ContainerImageScan (.manager.autoInstrumentationImage.java.repositoryDomain, .manager.autoInstrum...
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
ContainerImageScan (.manager.autoInstrumentationImage.java.repositoryDomain, .manager.autoInstrum...
Dockerfile not provided. Skipping sarif scan result.
|