Rate Limit downloading Trivy db
Seeing issues with the TrivyScanner when it tries to download the database from GHCR. It would be nice if hoppr-cop had a CLI arg that allowed end users to download the DB from a different container registry ( Gitlab, Nexus, Artifactory, etc).
Using Trivy natively allows this behavior by using the --db-repository arg.
ScannerError: TrivyScanner generated an exception: 2024-10-09T15:05:14Z INFO
[db] Need to update DB
2024-10-09T15:05:14Z INFO [db] Downloading DB...
repository="ghcr.io/aquasecurity/trivy-db:2"
2024-10-09T15:05:19Z FATAL Fatal error init error: DB error: failed to
download vulnerability DB: database download error: OCI repository error: 1
error occurred:
* GET https://ghcr.io/v2/aquasecurity/trivy-db/manifests/2:
TOOMANYREQUESTS: retry-after: 700.682µs, allowed: 44000/minute
unexpected error: TrivyScanner generated an exception: 2024-10-09T15:05:14Z
INFO Need to update DB
2024-10-09T15:05:14Z INFO Downloading DB...
repository="ghcr.io/aquasecurity/trivy-db:2"
2024-10-09T15:05:19Z FATAL Fatal error init error: DB error: failed to
download vulnerability DB: database download error: OCI repository error: 1
error occurred:
* GET https://ghcr.io/v2/aquasecurity/trivy-db/manifests/2:
TOOMANYREQUESTS: retry-after: 700.682µs, allowed: 44000/minute