Mirror error when downloading new DB

[colton-freeman]

Question

Good day all,
We use Trivy as one of our scan tools in our GitLab pipeline. Currently we build our Trivy image from source (0.57.0). I was trying to update to 0.58.1 but then ran into the issue of the "connection reset by peer". 0.57.1, 0.58.0, and 0.58.1 all give this error, 0.57.0 still works fine for us. I did read some docs/issues in regards to the default mirror switching to mirror.gcr.io and ghcr being the fall back.
I am curious about why bumping a patch breaks it. It looked like that was merged back in Nov so figured we would have seen this error sooner.
Any help would be appreciated and if you need more info lemme know.

Target

Container Image

Scanner

Vulnerability

Output Format

JSON

Mode

Standalone

Operating System

RHEL's UBI

Version

0.57.0 (trying to bump to 0.58.1)

[DmitriyLewen]

Hello @colton-freeman

It looks like you have a problem with mirror.gcr.io in your Pipeline.

Can you try using --db-repository mirror.gcr.io/aquasec/trivy-db:2 in v0.57.0 to test this theory?

[colton-freeman]

Will do, I will let you know how that goes. Thank you for the quick response.