Skip to content
代码片段 群组 项目
未验证 提交 7941c9cb 编辑于 作者: Phillip Wells's avatar Phillip Wells 提交者: GitLab
浏览文件

Merge branch 'doc-ghcr-TOOMANYREQUESTS-in-CS-container-scanning' into 'master'

Docs: Improve "Java database mirror" section

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/168367



Merged-by: default avatarPhillip Wells <pwells@gitlab.com>
Approved-by: default avatarIgor Frenkel <ifrenkel@gitlab.com>
Approved-by: default avatarPhillip Wells <pwells@gitlab.com>
Co-authored-by: default avatarKatrin Leinweber <kleinweber@gitlab.com>
No related branches found
No related tags found
无相关合并请求
...@@ -487,7 +487,7 @@ For self-managed GitLab instances in an environment with limited, restricted, or ...@@ -487,7 +487,7 @@ For self-managed GitLab instances in an environment with limited, restricted, or
to external resources through the internet, some adjustments are required for the container scanning job to to external resources through the internet, some adjustments are required for the container scanning job to
successfully run. For more information, see [Offline environments](../offline_deployments/index.md). successfully run. For more information, see [Offline environments](../offline_deployments/index.md).
#### Requirements for offline container Scanning #### Requirements for offline container scanning
To use container scanning in an offline environment, you need: To use container scanning in an offline environment, you need:
...@@ -613,7 +613,7 @@ Scanning images in external private registries is not supported when [FIPS mode] ...@@ -613,7 +613,7 @@ Scanning images in external private registries is not supported when [FIPS mode]
#### Create and use a Trivy Java database mirror #### Create and use a Trivy Java database mirror
When the `trivy` scanner is used and a `jar` file is encountered in a container image being scanned, `trivy` downloads an additional `trivy-java-db` vulnerability database. By default, the `trivy-java-db` database is hosted as an [OCI artifact](https://oras.land/docs/quickstart/) at `ghcr.io/aquasecurity/trivy-java-db:1`. If this registry is not accessible, for example in a network-isolated offline GitLab instance, one solution is to mirror the `trivy-java-db` to a container registry that can be accessed in the offline instance: When the `trivy` scanner is used and a `jar` file is encountered in a container image being scanned, `trivy` downloads an additional `trivy-java-db` vulnerability database. By default, the `trivy-java-db` database is hosted as an [OCI artifact](https://oras.land/docs/quickstart/) at `ghcr.io/aquasecurity/trivy-java-db:1`. If this registry is [not accessible](#running-container-scanning-in-an-offline-environment) or responds with `TOOMANYREQUESTS`, one solution is to mirror the `trivy-java-db` to a more accessible container registry:
```yaml ```yaml
mirror trivy java db: mirror trivy java db:
......
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册