Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-31822

RHACS unable to scan image from registry.redhat.io/network-observability

    • False
    • Hide

      None

      Show
      None
    • False
    • Important

      USER PROBLEM

      RHACS unable to scan image  registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7` and reports error mentioned below ,which indicates that the scanner component failed because it encountered a disallowed character while attempting to parse the component data (CPE version).    

      error: code = Internal desc = failed to scan all layer contents: layer \"sha256:145d7b5d75944e4f5cc9bd4529a5333648441e10a52a55b71eb135b8d169a17a\": cpe: version: disallowed character '$'"}

       

      Reproduction steps :

       Testing done with roxctl version: 4.9.0 

      • Pulled the machine on my registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7
      • Integrated registry registry.redhat.io in RHACS-> Integrations->RedHat
      • Executed the roxctl command to scan the image and was able to reproduce the issue

      $ roxctl image scan --image=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7 --force -o json
      ERROR: Scanning image failed: retrieving image scan result: could not scan image: "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7": rpc error: code = Internal desc = image enrichment error: error scanning image: registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7 error: scanning "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7" with scanner "Scanner V4": index and scan image report (reference: "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7"): get or create index: create index: rpc error: code = Internal desc = failed to scan all layer contents: layer "sha256:145d7b5d75944e4f5cc9bd4529a5333648441e10a52a55b71eb135b8d169a17a": cpe: version: disallowed character '$'. Retrying after 3 seconds...
      ERROR: Scanning image failed: retrieving image scan result: could not scan image: "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7": rpc error: code = Internal desc = image enrichment error: error scanning image: registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7 error: scanning "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7" with scanner "Scanner V4": index and scan image report (reference: "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7"): get or create index: create index: rpc error: code = Internal desc = failed to scan all layer contents: layer "sha256:145d7b5d75944e4f5cc9bd4529a5333648441e10a52a55b71eb135b8d169a17a": cpe: version: disallowed character '$'. Retrying after 3 seconds...

              Unassigned Unassigned
              sasakshi@redhat.com Sakshi sakshi
              ACS Scanner
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: