You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For the same file with exactly the same sha two entries are generated.
Desired Behavior
Only the entry with version 2.41 is generated.
Actual Behavior
Two entries for the same artifact are generated, correct one with version 2.41 and the wrong one with version 2.41.0
Reproduction Steps
1.Run trivy against pulsar docker image: `trivy image apachepulsar/pulsar:3.3.0 --format cyclonedx`
2. Check the result - duplicated entries are visible for a few jersey artifacts, namely: jersey-container-servlet-core, jersey-container-servlet, jersey-media-json-jackson and jersey-media-multipart
kind/bugCategorizes issue or PR as related to a bug.
1 participant
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Description
Running the
trivy
againstpulsar
image produces following outputFor the same file with exactly the same sha two entries are generated.
Desired Behavior
Only the entry with version
2.41
is generated.Actual Behavior
Two entries for the same artifact are generated, correct one with version
2.41
and the wrong one with version2.41.0
Reproduction Steps
Target
Container Image
Scanner
None
Output Format
CycloneDX
Mode
Standalone
Debug Output
Operating System
Ubuntu 20.04
Version
Checklist
trivy clean --all
Beta Was this translation helpful? Give feedback.
All reactions