trivy-db-glad cannot be built
Proposal
The db-build
job for the scheduled pipeline of trivy-db-glad
is failing:
wget -qO - https://github.com/CocoaPods/Specs/archive/master.tar.gz | tar xz -C cache/cocoapods-specs --strip-components=1
tar: can't make dir Specs/9/c/5/Amplify/1.19.1: No space left on device
tar: can't create directory 'Specs/9/c/5/Amplify/1.19.1': No space left on device
This is due to the addition of Cocoapods advisories to trivy-db
which requires more storage space.
We've tried increasing the runner size to:
-
This failed with another error
## required to convert GHSA Swift repo links to Cocoapods package names wget -qO - https://github.com/CocoaPods/Specs/archive/master.tar.gz | tar xz -C cache/cocoapods-specs --strip-components=1 wget: error getting response tar: unexpected end of file
Retrying failed with yet another error
## required to convert GHSA Swift repo links to Cocoapods package names wget -qO - https://github.com/CocoaPods/Specs/archive/master.zip | tar xz -C cache/cocoapods-specs --strip-components=1 tar: invalid magic tar: short read
-
This was able to proceed slightly further, but still ended up failing:
## required to convert GHSA Swift repo links to Cocoapods package names wget -qO - https://github.com/CocoaPods/Specs/archive/master.tar.gz | tar xz -C cache/cocoapods-specs --strip-components=1 mkdir -p cache/vuln-list wget -qO - https://github.com/aquasecurity/vuln-list/archive/main.tar.gz | tar xz -C cache/vuln-list --strip-components=1 wget: error getting response tar: unexpected end of file tar: short read
We need to figure out how to fix this error.
Impact
This error is preventing the trivy-db-glad
database from being built, which causes stale vulnerability data in our Container Scanning tool.