init error when I just installed trivy and exec command

[EigoOda]

I just Installed trivy and exec it.
But init error happened.

OS: macOS(M1)
package manager: aqua/brew

$ trivy image python:3.4-alpine
2022-08-10T00:26:50.461+0900    INFO    Need to update DB
2022-08-10T00:26:50.461+0900    INFO    DB Repository: ghcr.io/aquasecurity/trivy-db
2022-08-10T00:26:50.461+0900    INFO    Downloading DB...
2022-08-10T00:26:50.970+0900    FATAL   init error: DB error: failed to download vulnerability DB: OCI artifact error: OCI artifact error: OCI repository error: GET https://ghcr.io/token?scope=repository%3Aaquasecurity%2Ftrivy-db%3Apull&service=ghcr.io: DENIED: denied

$ trivy -v
Version: 0.30.4

[muffl0n]

Maybe it'll work with 0.31.0. PR for version upgrade: Homebrew/homebrew-core#108160

[EigoOda]

@muffl0n Thanks! I'll try it!

[EigoOda]

Hmm... It didn't work.

Install with aqua.

$ trivy -v
Version: 0.31.1
$ trivy image python:3.4-alpine
2022-08-16T23:18:02.137+0900    INFO    Need to update DB
2022-08-16T23:18:02.137+0900    INFO    DB Repository: ghcr.io/aquasecurity/trivy-db
2022-08-16T23:18:02.137+0900    INFO    Downloading DB...
2022-08-16T23:18:02.637+0900    FATAL   init error: DB error: failed to download vulnerability DB: OCI artifact error: OCI artifact error: OCI repository error: GET https://ghcr.io/token?scope=repository%3Aaquasecurity%2Ftrivy-db%3Apull&service=ghcr.io: DENIED: denied

[knqyf263]

You might set an expried token for ghcr.io. Could you try "docker logout ghcr.io"?

[muffl0n]

Awesome! That did the trick! Thank you very much! ❤️

[EigoOda]

@knqyf263 It works! Thank you very much!!!

[frankisinfotech]

You can use this command to first authenticate to ghcr before trying to perform any operations.
echo $GITHUB_TOKEN | docker login ghcr.io -u frankisinfotech --password-stdin

• You may have to go to your GitHub account to create a PAT (Personal Access Token),
• Export the token as an env variable with the name, GITHUB_TOKEN.
• Once that is done, run the above command to get authenticated, then you can run other trivy commands against ghCR