aquasecurity / aquasecurity/trivy-java-db

Database cache not working

Open
#53 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
41
Forks
26
PR merge metrics
No merged PRs in 30d

Description

Dear all
Database cache seems to be broken due to publish failure.
`
{
"Version": 1,
"NextUpdate": "2025-02-17T06:14:17Z",
"UpdatedAt": "2025-02-14T02:24:51.921228254Z",
"DownloadedAt": "2025-02-20T08:31:12.607068938Z"
}
`
The NextUpdate remains valued in the past.
It seem to match to three days after the last successfull github action on current projet.

Workaround
Current workaround is to manually update NextUpdate in the metadata.json but the database version downloaded still is an old one.

Trivy version
0.46.1

Reproduction Steps
trivy image --download-java-db-only

Operating System
linux

Contributor guide

Open the contributing guide

Research direction

Start with metadata.json and the GitHub Actions publication workflow, then reproduce the issue with `trivy image --download-java-db-only` on Linux using Trivy 0.46.1. Compare NextUpdate, UpdatedAt, DownloadedAt, and the downloaded database version against the latest successful publication. Done means the command retrieves the current database and metadata has a future NextUpdate.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, go, linux
Domain
databases, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.