microsoft / microsoft/security-devops-action

Trivy Docker image scanner do not work, when use ubuntu-24.04-arm GitHub Runner

Open
#270 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
164
Forks
62
PR merge metrics
No merged PRs in 30d

Description

Trivy Docker image scanner do not work, when use ubuntu-24.04-arm GitHub Runner. works when using ubuntu-latest runner. I have updated to version c0f73835fa1f80fc12cc96ea7f9185735705f433, commited on May 7, 2026. Error messages:

ToolLauncherNotFoundException: Could not successfully find the /home/runner/work/_msdo/packages/nuget/Microsoft.Guardian.TrivyRedist_linux_amd64.0.69.3/tools/trivy tool launcher. Please ensure any dependent frameworks are installed.

Error: Win32Exception: An error occurred trying to start process '/home/runner/work/_msdo/packages/nuget/Microsoft.Guardian.TrivyRedist_linux_amd64.0.69.3/tools/trivy' with working directory '/home/runner/work/security-testing/security-testing'. Exec format error

GuardianFileNotFoundException: Unable to find required file at: /home/runner/work/security-testing/security-testing/.gdn/r/.gdntoolsdata

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the failure in a workflow using the ubuntu-24.04-arm runner and compare it with ubuntu-latest. Start from the Trivy launcher and .gdn/r/.gdntoolsdata errors shown in the report; done means the Docker image scan starts successfully on the ARM runner without an exec format or missing-file error.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, github-actions
Domain
ci-cd, devops, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.