Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CI action docker-security-build is unstable #115

Closed
walldiss opened this issue Sep 30, 2024 · 1 comment · Fixed by #119
Closed

CI action docker-security-build is unstable #115

walldiss opened this issue Sep 30, 2024 · 1 comment · Fixed by #119
Assignees
Labels
github_actions Pull requests that update GitHub Actions code

Comments

@walldiss
Copy link
Member

Sometimes reusable pipeline docker-security-build is failing on docker-security job. The failing step is "Run Trivy voulnerability scanner". Restart usually fixes the problem.

Example of error log:

2024-09-30T15:00:33Z	FATAL	Fatal error	init error: DB error: failed to download vulnerability DB: database download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:135ef359f0f53c941768feed653ca03b0f115f99e0d875df51ff33b8e9b88b8a: TOOMANYREQUESTS: retry-after: 716.596µs, allowed: 44000/minute

Last error in ci:
https://github.com/celestiaorg/celestia-node/actions/runs/11108743464/job/30862439970#step:5:23

@MSevey
Copy link
Member

MSevey commented Oct 23, 2024

This is due to the ratelimits of the Trivy scanner, not the action itself.
I'll look into the rate limits some more.

related to #118

@MSevey MSevey self-assigned this Oct 23, 2024
@MSevey MSevey added github_actions Pull requests that update GitHub Actions code and removed needs: triage labels Oct 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants