Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bug(k8s): Trivy doesn't detect amazon linux from KBOM #8246

Open
afdesk opened this issue Jan 15, 2025 Discussed in #8129 · 0 comments
Open

bug(k8s): Trivy doesn't detect amazon linux from KBOM #8246

afdesk opened this issue Jan 15, 2025 Discussed in #8129 · 0 comments
Assignees
@afdesk
Labels
bug scan/sbom Issues relating to SBOM target/kubernetes Issues relating to kubernetes cluster scanning

Comments

@afdesk
Copy link
Contributor

afdesk commented Jan 15, 2025

Trivy doesn't detect correctly amazon linux from a generated KBOM. SBOM scan shows next warning:

2024-12-18T18:51:48Z	WARN	Unsupported os	family="amazon linux"

it happens because ftypes.Amazon is amazon instead of amazon linux, and there is no a scanner for the last one:

trivy/pkg/fanal/types/const.go

Line 26 in 011012a

Amazon OSType = "amazon"

trivy/pkg/detector/ospkg/detect.go

Line 35 in 011012a

ftypes.Amazon: amazon.NewScanner(),

Discussed in #8129 (comment)
@afdesk afdesk added triage/support Indicates an issue that is a support question. scan/sbom Issues relating to SBOM target/kubernetes Issues relating to kubernetes cluster scanning bug and removed triage/support Indicates an issue that is a support question. labels Jan 15, 2025
@afdesk afdesk self-assigned this Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@afdesk afdesk

Labels
bug scan/sbom Issues relating to SBOM target/kubernetes Issues relating to kubernetes cluster scanning
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@afdesk