Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Trivy analyzer can't detect SLES OS #4051

@PaulRitzkat0110

Description

@PaulRitzkat0110

Current Behavior

Uploading sboms generated with trivy 0.53 for SLES 12.5 and 15.x can't be scanned by the trivy analyzer, because the OS is not detected by trivy, trivy 0.53 server log:

INFO	Detected OS	family="none" version=""
WARN	Unsupported os	family="none"
INFO	Number of language-specific files	num=0

dtrack-logs-2024-08-08 17_28_28.txt

Steps to Reproduce

  1. upload a trivy generated sbom with SLES 12.5 or 15.x OS packages: trivy.json
  2. have dtrack configured to analyze with trivy
  3. no OS dectected by trivy, no vulns in dtrack: 403cb7b7-81b6-4ffd-bbbb-dd910ea39249-withVulnerabilities.cdx.json

Expected Behavior

OS is set correctly by dtrack and discovered by trivy, like it does for example for redhat, and vulns are reported back to dtrack

Dependency-Track Version

4.11.5

Dependency-Track Distribution

Container Image

Database Server

H2

Database Server Version

No response

Browser

N/A

Checklist

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions