Skip to content

Add victoria-metrics-operator v0.66.2 community pack#263

Open
3pings wants to merge 5 commits into
mainfrom
victoria-metrics-operator
Open

Add victoria-metrics-operator v0.66.2 community pack#263
3pings wants to merge 5 commits into
mainfrom
victoria-metrics-operator

Conversation

@3pings

@3pings 3pings commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds the Victoria Metrics Operator community pack (chart v0.66.2, operator app version v0.73.1).

The VictoriaMetrics Operator manages VictoriaMetrics monitoring/observability components (VMSingle, VMCluster, VMAgent, VMAlert, VMAuth, VMAlertmanager, VLogs, VTraces, VMAnomaly, etc.) through Custom Resources, and converts Prometheus Operator objects into their VictoriaMetrics equivalents.

What's included

  • pack.json, values.yaml, logo.png, and the bundled operator + CRD charts.
  • README.md following the pack-central README template (Prerequisites / Parameters / Upgrade / Usage / References).
  • pack.content.images list enumerating every image the pack can pull for offline/air-gapped caching:
    • operator + config-reloader (v0.73.1)
    • CRD upgrade/cleanup helper jobs (busybox, registry.k8s.io/kubectl) — off by default
    • all operator-managed component defaults with exact tags resolved from the operator source at tag v0.73.1 (VM_METRICS_VERSION=v1.147.0, VM_LOGS_VERSION=v1.51.0, VM_TRACES_VERSION=v0.9.4, VM_ANOMALY_VERSION=v1.29.7, alertmanager v0.31.0)

🤖 Generated with Claude Code

Adds the VictoriaMetrics Operator pack (operator app version v0.73.1),
including README and the full pack.content.images list covering the
operator, config reloader, CRD helper jobs, and all operator-managed
component default images for offline caching.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@3pings
3pings requested review from kylejep and vishwanaths July 17, 2026 17:02

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

⚠️ Secret Scan Results:

  • Secret scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

⚠️ CVE Scan Errors:

  • CVE scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 1 image(s).

Scan Summary:

  • Total images scanned: 16
  • Clean images: 1
  • Images with CVEs: 15
  • Total CVEs found: 430

🔴 Critical CVEs: 11
🟠 High CVEs: 42
🟡 Medium CVEs: 44
🟢 Low CVEs: 333

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 62 CVEs (Critical: 2, High: 10, Medium: 5, Low: 45)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 14, Medium: 37, Low: 118)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 5 more image(s)

⚠️ Scan Errors: 1 image(s) failed to scan

  • registry.k8s.io/kubectl:

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

⚠️ Secret Scan Results:

  • Secret scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

⚠️ CVE Scan Errors:

  • CVE scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 1 image(s).

Scan Summary:

  • Total images scanned: 16
  • Clean images: 1
  • Images with CVEs: 15
  • Total CVEs found: 429

🔴 Critical CVEs: 11
🟠 High CVEs: 42
🟡 Medium CVEs: 44
🟢 Low CVEs: 332

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 61 CVEs (Critical: 2, High: 10, Medium: 5, Low: 44)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 14, Medium: 37, Low: 118)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 5 more image(s)

⚠️ Scan Errors: 1 image(s) failed to scan

  • registry.k8s.io/kubectl:

❌ One or more images could not be scanned. See errors above.

3pings and others added 2 commits July 17, 2026 13:07
… in version

Aligns the pack folder name and pack.json version field with the
no-"v" versioning convention (0.66.2).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
registry.k8s.io/kubectl has no `latest` tag, so a bare reference fails to
pull. The chart derives the tag from the target cluster's Kubernetes
version; pin a concrete existing tag (v1.33.0) and note it should match
the cluster K8s minor.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

⚠️ Secret Scan Results:

  • Secret scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

⚠️ CVE Scan Errors:

  • CVE scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 1 image(s).

Scan Summary:

  • Total images scanned: 16
  • Clean images: 1
  • Images with CVEs: 15
  • Total CVEs found: 428

🔴 Critical CVEs: 11
🟠 High CVEs: 42
🟡 Medium CVEs: 44
🟢 Low CVEs: 331

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 60 CVEs (Critical: 2, High: 10, Medium: 5, Low: 43)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 14, Medium: 37, Low: 118)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 5 more image(s)

⚠️ Scan Errors: 1 image(s) failed to scan

  • registry.k8s.io/kubectl:

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

⚠️ Secret Scan Results:

  • Secret scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

⚠️ CVE Scan Errors:

  • CVE scan failed for 1 image(s)
    • registry.k8s.io/kubectl:

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 1 image(s).

Scan Summary:

  • Total images scanned: 16
  • Clean images: 1
  • Images with CVEs: 15
  • Total CVEs found: 429

🔴 Critical CVEs: 11
🟠 High CVEs: 42
🟡 Medium CVEs: 44
🟢 Low CVEs: 332

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 61 CVEs (Critical: 2, High: 10, Medium: 5, Low: 44)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 14, Medium: 37, Low: 118)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 5 more image(s)

⚠️ Scan Errors: 1 image(s) failed to scan

  • registry.k8s.io/kubectl:

❌ One or more images could not be scanned. See errors above.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 7 image(s)
    • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':
    • snap: snap file "docker.io/victoriametrics/vmalert:v1.147.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmalert/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmalert/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vmanomaly:v1.29.7: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmanomaly:v1.29.7':
    • snap: snap file "docker.io/victoriametrics/vmanomaly:v1.29.7" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmanomaly/manifests/v1.29.7: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmanomaly/manifests/v1.29.7: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.29.7": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vmauth:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmauth:v1.147.0':
    • snap: snap file "docker.io/victoriametrics/vmauth:v1.147.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmauth/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmauth/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
    • snap: snap file "docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-enterprise": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':
    • snap: snap file "docker.io/victoriametrics/vminsert:v1.147.0-cluster" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-cluster": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • ... and 2 more failed

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 7 image(s).

Scan Summary:

  • Total images scanned: 10
  • Clean images: 1
  • Images with CVEs: 9
  • Total CVEs found: 292

🔴 Critical CVEs: 8
🟠 High CVEs: 37
🟡 Medium CVEs: 14
🟢 Low CVEs: 233

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 60 CVEs (Critical: 2, High: 10, Medium: 5, Low: 43)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • registry.k8s.io/kubectl:v1.33.0: 70 CVEs (Critical: 2, High: 9, Medium: 7, Low: 52)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143

⚠️ Scan Errors: 7 image(s) failed to scan

  • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':
  • docker.io/victoriametrics/vmanomaly:v1.29.7: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmanomaly:v1.29.7':
  • docker.io/victoriametrics/vmauth:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmauth:v1.147.0':
  • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
  • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':
  • docker.io/victoriametrics/vmselect:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmselect:v1.147.0-cluster':
  • docker.io/victoriametrics/vmstorage:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmstorage:v1.147.0-cluster':

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 11 image(s)
    • docker.io/victoriametrics/victoria-metrics:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-metrics:v1.147.0':
    • snap: snap file "docker.io/victoriametrics/victoria-metrics:v1.147.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/victoria-metrics/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/victoria-metrics/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/victoria-traces:v0.9.4: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-traces:v0.9.4':
    • snap: snap file "docker.io/victoriametrics/victoria-traces:v0.9.4" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/victoria-traces/manifests/v0.9.4: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/victoria-traces/manifests/v0.9.4: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v0.9.4": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vlagent:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vlagent:v1.51.0':
    • snap: snap file "docker.io/victoriametrics/vlagent:v1.51.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vlagent/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vlagent/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.51.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vmagent:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmagent:v1.147.0':
    • snap: snap file "docker.io/victoriametrics/vmagent:v1.147.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmagent/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmagent/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':
    • snap: snap file "docker.io/victoriametrics/vmalert:v1.147.0" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmalert/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmalert/manifests/v1.147.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • ... and 6 more failed

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 11 image(s).

Scan Summary:

  • Total images scanned: 6
  • Clean images: 1
  • Images with CVEs: 5
  • Total CVEs found: 193

🔴 Critical CVEs: 6
🟠 High CVEs: 28
🟡 Medium CVEs: 13
🟢 Low CVEs: 146

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 61 CVEs (Critical: 2, High: 10, Medium: 5, Low: 44)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • registry.k8s.io/kubectl:v1.33.0: 70 CVEs (Critical: 2, High: 9, Medium: 7, Low: 52)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143

⚠️ Scan Errors: 11 image(s) failed to scan

  • docker.io/victoriametrics/victoria-metrics:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-metrics:v1.147.0':
  • docker.io/victoriametrics/victoria-traces:v0.9.4: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-traces:v0.9.4':
  • docker.io/victoriametrics/vlagent:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vlagent:v1.51.0':
  • docker.io/victoriametrics/vmagent:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmagent:v1.147.0':
  • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':
  • docker.io/victoriametrics/vmanomaly:v1.29.7: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmanomaly:v1.29.7':
  • docker.io/victoriametrics/vmauth:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmauth:v1.147.0':
  • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
  • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':
  • docker.io/victoriametrics/vmselect:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmselect:v1.147.0-cluster':

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 16 image(s)
    • docker.io/busybox:latest: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/busybox:latest':
    • snap: snap file "docker.io/busybox:latest" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/library/busybox/manifests/latest: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/library/busybox/manifests/latest: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "latest": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/prom/alertmanager:v0.31.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/prom/alertmanager:v0.31.0':

    • snap: snap file "docker.io/prom/alertmanager:v0.31.0" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/prom/alertmanager/manifests/v0.31.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/prom/alertmanager/manifests/v0.31.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v0.31.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/operator:config-reloader-v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:config-reloader-v0.73.1':

    • snap: snap file "docker.io/victoriametrics/operator:config-reloader-v0.73.1" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/operator/manifests/config-reloader-v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/operator/manifests/config-reloader-v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "config-reloader-v0.73.1": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/operator:v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:v0.73.1':

    • snap: snap file "docker.io/victoriametrics/operator:v0.73.1" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/operator/manifests/v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/operator/manifests/v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v0.73.1": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/victoria-logs:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-logs:v1.51.0':

    • snap: snap file "docker.io/victoriametrics/victoria-logs:v1.51.0" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/victoria-logs/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/victoria-logs/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v1.51.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • ... and 11 more failed

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 16 image(s).

Scan Summary:

  • Total images scanned: 1
  • Clean images: 0
  • Images with CVEs: 1
  • Total CVEs found: 70

🔴 Critical CVEs: 2
🟠 High CVEs: 9
🟡 Medium CVEs: 7
🟢 Low CVEs: 52

Images with CVEs:

⚠️ Scan Errors: 16 image(s) failed to scan

  • docker.io/busybox:latest: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/busybox:latest':
  • docker.io/prom/alertmanager:v0.31.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/prom/alertmanager:v0.31.0':

  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:config-reloader-v0.73.1':

  • docker.io/victoriametrics/operator:v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:v0.73.1':

  • docker.io/victoriametrics/victoria-logs:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-logs:v1.51.0':

  • docker.io/victoriametrics/victoria-metrics:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-metrics:v1.147.0':

  • docker.io/victoriametrics/victoria-traces:v0.9.4: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-traces:v0.9.4':

  • docker.io/victoriametrics/vlagent:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vlagent:v1.51.0':

  • docker.io/victoriametrics/vmagent:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmagent:v1.147.0':

  • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 16 image(s)
    • docker.io/busybox:latest: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/busybox:latest':
    • snap: snap file "docker.io/busybox:latest" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/library/busybox/manifests/latest: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/library/busybox/manifests/latest: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "latest": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/prom/alertmanager:v0.31.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/prom/alertmanager:v0.31.0':

    • snap: snap file "docker.io/prom/alertmanager:v0.31.0" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/prom/alertmanager/manifests/v0.31.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/prom/alertmanager/manifests/v0.31.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v0.31.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/operator:config-reloader-v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:config-reloader-v0.73.1':

    • snap: snap file "docker.io/victoriametrics/operator:config-reloader-v0.73.1" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/operator/manifests/config-reloader-v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/operator/manifests/config-reloader-v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "config-reloader-v0.73.1": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/operator:v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:v0.73.1':

    • snap: snap file "docker.io/victoriametrics/operator:v0.73.1" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/operator/manifests/v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/operator/manifests/v0.73.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v0.73.1": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • docker.io/victoriametrics/victoria-logs:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-logs:v1.51.0':

    • snap: snap file "docker.io/victoriametrics/victoria-logs:v1.51.0" does not exist

    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/victoria-logs/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/victoria-logs/manifests/v1.51.0: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit

    • snap: strconv.Atoi: parsing "v1.51.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • ... and 11 more failed

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 16 image(s).

Scan Summary:

  • Total images scanned: 1
  • Clean images: 0
  • Images with CVEs: 1
  • Total CVEs found: 70

🔴 Critical CVEs: 2
🟠 High CVEs: 9
🟡 Medium CVEs: 7
🟢 Low CVEs: 52

Images with CVEs:

⚠️ Scan Errors: 16 image(s) failed to scan

  • docker.io/busybox:latest: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/busybox:latest':
  • docker.io/prom/alertmanager:v0.31.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/prom/alertmanager:v0.31.0':

  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:config-reloader-v0.73.1':

  • docker.io/victoriametrics/operator:v0.73.1: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/operator:v0.73.1':

  • docker.io/victoriametrics/victoria-logs:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-logs:v1.51.0':

  • docker.io/victoriametrics/victoria-metrics:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-metrics:v1.147.0':

  • docker.io/victoriametrics/victoria-traces:v0.9.4: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/victoria-traces:v0.9.4':

  • docker.io/victoriametrics/vlagent:v1.51.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vlagent:v1.51.0':

  • docker.io/victoriametrics/vmagent:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmagent:v1.147.0':

  • docker.io/victoriametrics/vmalert:v1.147.0: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmalert:v1.147.0':

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 2 image(s)
    • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
    • snap: snap file "docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-enterprise": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':
    • snap: snap file "docker.io/victoriametrics/vminsert:v1.147.0-cluster" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-cluster": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 17
  • Clean images: 17
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 2 image(s)
    • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
    • snap: snap file "docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vmbackupmanager/manifests/v1.147.0-enterprise: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-enterprise": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory
    • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':
    • snap: snap file "docker.io/victoriametrics/vminsert:v1.147.0-cluster" does not exist
    • docker: docker not available: failed to connect to Docker daemon. Ensure Docker is running and accessible
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/victoriametrics/vminsert/manifests/v1.147.0-cluster: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit
    • snap: strconv.Atoi: parsing "v1.147.0-cluster": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

Please review the findings above and address any issues before merging.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 2 image(s).

Scan Summary:

  • Total images scanned: 15
  • Clean images: 1
  • Images with CVEs: 14
  • Total CVEs found: 488

🔴 Critical CVEs: 13
🟠 High CVEs: 52
🟡 Medium CVEs: 51
🟢 Low CVEs: 372

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 62 CVEs (Critical: 2, High: 10, Medium: 5, Low: 45)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 15, Medium: 37, Low: 117)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 4 more image(s)

⚠️ Scan Errors: 2 image(s) failed to scan

  • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
  • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':

❌ One or more images could not be scanned. See errors above.

@bulwark-spectrocloud bulwark-spectrocloud Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 2 image(s).

Scan Summary:

  • Total images scanned: 15
  • Clean images: 1
  • Images with CVEs: 14
  • Total CVEs found: 487

🔴 Critical CVEs: 13
🟠 High CVEs: 52
🟡 Medium CVEs: 51
🟢 Low CVEs: 371

Images with CVEs:

  • docker.io/prom/alertmanager:v0.31.0: 61 CVEs (Critical: 2, High: 10, Medium: 5, Low: 44)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143
  • docker.io/victoriametrics/operator:config-reloader-v0.73.1: 3 CVEs (Critical: 0, High: 0, Medium: 0, Low: 3)
  • docker.io/victoriametrics/operator:v0.73.1: 4 CVEs (Critical: 0, High: 0, Medium: 0, Low: 4)
  • docker.io/victoriametrics/victoria-logs:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/victoria-metrics:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/victoria-traces:v0.9.4: 35 CVEs (Critical: 0, High: 0, Medium: 0, Low: 35)
  • docker.io/victoriametrics/vlagent:v1.51.0: 55 CVEs (Critical: 2, High: 9, Medium: 1, Low: 43)
    Critical CVEs: CVE-2026-31789
  • docker.io/victoriametrics/vmagent:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmalert:v1.147.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • docker.io/victoriametrics/vmanomaly:v1.29.7: 174 CVEs (Critical: 5, High: 15, Medium: 37, Low: 117)
    Critical CVEs: CVE-2019-1010022, CVE-2026-13221, CVE-2026-42496, CVE-2026-8376
    ... and 4 more image(s)

⚠️ Scan Errors: 2 image(s) failed to scan

  • docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vmbackupmanager:v1.147.0-enterprise':
  • docker.io/victoriametrics/vminsert:v1.147.0-cluster: failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/victoriametrics/vminsert:v1.147.0-cluster':

❌ One or more images could not be scanned. See errors above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant