aquasecurity / aquasecurity/trivy-java-db
Database cache not working
- Dominant language
- Go
- Stars
- 41
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
Dear all
Database cache seems to be broken due to publish failure.
`
{
"Version": 1,
"NextUpdate": "2025-02-17T06:14:17Z",
"UpdatedAt": "2025-02-14T02:24:51.921228254Z",
"DownloadedAt": "2025-02-20T08:31:12.607068938Z"
}
`
The NextUpdate remains valued in the past.
It seem to match to three days after the last successfull github action on current projet.
Workaround
Current workaround is to manually update NextUpdate in the metadata.json but the database version downloaded still is an old one.
Trivy version
0.46.1
Reproduction Steps
trivy image --download-java-db-only
Operating System
linux
Contributor guide
Research direction
Start with metadata.json and the GitHub Actions publication workflow, then reproduce the issue with `trivy image --download-java-db-only` on Linux using Trivy 0.46.1. Compare NextUpdate, UpdatedAt, DownloadedAt, and the downloaded database version against the latest successful publication. Done means the command retrieves the current database and metadata has a future NextUpdate.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, go, linux
- Domain
- databases, devops
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100