Skip to content

Commit 60db681

Browse files
OwnerOwner
Owner
authored and
Owner
committed
cli scanner version issue
1 parent 972f90e commit 60db681

File tree

3 files changed

+152
-4
lines changed

3 files changed

+152
-4
lines changed

‎.github/workflows/build-scan.yaml‎

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -42,14 +42,23 @@ jobs:
4242
- name: Build result image
4343
run: docker build -t $REGISTRY/$REPO/result:latest ./result
4444

45-
# --- Install Sysdig Scanner ---
45+
4646
- name: Install Sysdig CLI Scanner
4747
run: |
48-
curl -LO curl -LO "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/$(curl -L -s https://download.sysdig.com/scanning/sysdig-cli-scanner/latest_version.txt)/linux/arm64/sysdig-cli-scanner"
49-
chmod +x sysdig-cli-scanner-linux-amd64
50-
sudo mv sysdig-cli-scanner-linux-amd64 /usr/local/bin/sysdig-cli-scanner
48+
LATEST_VERSION=$(curl -s https://download.sysdig.com/scanning/sysdig-cli-scanner/latest_version.txt)
49+
curl -Lo sysdig-cli-scanner "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/${LATEST_VERSION}/linux/amd64/sysdig-cli-scanner"
50+
chmod +x sysdig-cli-scanner
51+
sudo mv sysdig-cli-scanner /usr/local/bin/
5152
sysdig-cli-scanner --version
5253
54+
# # --- Install Sysdig Scanner ---
55+
# - name: Install Sysdig CLI Scanner
56+
# run: |
57+
# curl -LO curl -LO "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/$(curl -L -s https://download.sysdig.com/scanning/sysdig-cli-scanner/latest_version.txt)/linux/arm64/sysdig-cli-scanner"
58+
# chmod +x sysdig-cli-scanner-linux-amd64
59+
# sudo mv sysdig-cli-scanner-linux-amd64 /usr/local/bin/sysdig-cli-scanner
60+
# sysdig-cli-scanner --version
61+
5362
# --- Scan images ---
5463
- name: Scan vote image
5564
run: |

‎scan-logs‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
{"level":"info","version":"1.23.0","commit":"92edf73","time":"2025-11-04T18:07:45-05:00","message":"Starting analysis with Sysdig scanner"}
2+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Using path for the cache: /Users/owner/Library/Caches/inlineScannerCache.db"}
3+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Using local MainDB (skipping DB update)"}
4+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Using cached DB file on path /usr/local/bin/main.db/sysdig-db-data"}
5+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Offline mode enabled for file analyzers"}
6+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"standalone mode, we won't perform calls to backend"}
7+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Loading MainDB V3 from: /usr/local/bin/main.db/sysdig-db-data"}
8+
{"level":"info","time":"2025-11-04T18:07:45-05:00","message":"Done: MainDB V3 loaded"}
9+
{"level":"info","imgName":"scan","time":"2025-11-04T18:07:45-05:00","message":"Retrieving image"}
10+
{"level":"error","error":"Unable to get image: image not found from loader","time":"2025-11-04T18:07:57-05:00","message":"Exiting now"}

‎votingapp_scan.logs‎

Lines changed: 129 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,129 @@
1+
{"level":"info","version":"1.23.0","commit":"92edf73","time":"2025-11-04T17:47:03-05:00","message":"Starting analysis with Sysdig scanner"}
2+
{"level":"info","time":"2025-11-04T17:47:03-05:00","message":"Using path for the cache: /Users/owner/Library/Caches/inlineScannerCache.db"}
3+
{"level":"info","dbVersion":"V3","time":"2025-11-04T17:47:04-05:00","message":"Vuln DB version detected"}
4+
{"level":"info","time":"2025-11-04T17:47:04-05:00","message":"Retrieving MainDB"}
5+
{"level":"info","time":"2025-11-04T17:47:04-05:00","message":"Using local MainDB located at /usr/local/bin/main.db/sysdig-db-data since it is already up to date"}
6+
{"level":"info","time":"2025-11-04T17:47:04-05:00","message":"Using cached DB file on path /usr/local/bin/main.db/sysdig-db-data"}
7+
{"level":"info","error":"failed parsing OnPrem version : Malformed version: ","time":"2025-11-04T17:47:04-05:00","message":"unable to get onPrem version, will assume SaaS environment"}
8+
{"level":"info","time":"2025-11-04T17:47:04-05:00","message":"Loading MainDB V3 from: /usr/local/bin/main.db/sysdig-db-data"}
9+
{"level":"info","time":"2025-11-04T17:47:04-05:00","message":"Done: MainDB V3 loaded"}
10+
{"level":"info","imgName":"pull://nginx:latest","time":"2025-11-04T17:47:04-05:00","message":"Retrieving image"}
11+
{"level":"info","time":"2025-11-04T17:47:05-05:00","message":"first platform available in manifest is (linux/amd64), will use it"}
12+
{"level":"info","imgName":"pull://nginx:latest","time":"2025-11-04T17:47:06-05:00","message":"Done: image retrieved"}
13+
{"level":"info","time":"2025-11-04T17:47:06-05:00","message":"Start analyzing image"}
14+
{"level":"info","url":"https://app.us4.sysdig.com/api/scanning/sbom/v2/base-images/search","layersDigest":["sha256:36d06fe0cbc654e5f67d58c960ed33e53127e4a3288d8ce6f6a60a9c311794d4","sha256:6e19587ac5416790488e2e259fbb4e14ea409908bff5a4aab5e01760fc63c15a","sha256:8feb164cd673e978e6287e249339b5fa20d7aa46ebd09923092ae74dec88419a","sha256:2ced4cd78a7bdbb622141c41c9e83772f7f81dedd43527ec2df07c8fa6632f08","sha256:99cd1b1b6a4397c3835be9a48d6c04fdd8997bb15f29d0cb2cfcbaf3844b0d24","sha256:d81df94f8d07136711ea4ff25d1f14b8a9aad1e6816ab46ce25c840ddc8f326e","sha256:d7217c60dca400c2c3e6367dd67b30cf429e1d21a0f258ec37c0abb7a446ffbe"],"time":"2025-11-04T17:47:09-05:00","message":"base images resolved"}
15+
{"level":"info","assetID":"sha256:d261fd19cb63238535ab80d4e1be1d9e7f6c8b5a28a820188968dd3e6f06072d","pullstring":"nginx:latest","analyzerInfo":{"version":"v0.0.0-20251013122706-5c1e12a97f07"},"time":"2025-11-04T17:47:09-05:00","message":"{\"shouldExtract\":true}\n"}
16+
{"level":"info","time":"2025-11-04T17:47:09-05:00","message":"Start matching vulnerabilities"}
17+
{"level":"info","time":"2025-11-04T17:47:09-05:00","message":"Matched 150 packages"}
18+
{"level":"info","time":"2025-11-04T17:47:09-05:00","message":"attempting to use the latest policy model"}
19+
{"level":"warn","rep":"failed evaluating policies: failed to retrieve policies: failed to get policies: failed to unmarshal response body: proto: syntax error (line 1:1): invalid value <","time":"2025-11-04T17:47:10-05:00","message":"failed to evaluate with the new policy model, using the older version"}
20+
{"level":"info","time":"2025-11-04T17:47:10-05:00","message":"using the legacy policy model"}
21+
{"level":"info","time":"2025-11-04T17:47:10-05:00","message":"Start policies evaluation"}
22+
{"level":"info","result":"passed","time":"2025-11-04T17:47:10-05:00","message":"End policies evaluation"}
23+
{"level":"info","time":"2025-11-04T17:47:10-05:00","message":"Start risks acceptance evaluation"}
24+
{"level":"info","time":"2025-11-04T17:47:10-05:00","message":"Scan Result upload in progress"}
25+
{"level":"info","scan-result-id":"1874ef443ac59748faee8c01a82e2360","scan-result-url":"https://app.us4.sysdig.com/secure/#/vulnerabilities/results/1874ef443ac59748faee8c01a82e2360/overview","time":"2025-11-04T17:47:11-05:00","message":"Scan Result uploaded"}
26+
{"level":"info","duration":"7.103251714s","time":"2025-11-04T17:47:11-05:00","message":"Done"}
27+
28+
29+
30+
sysdig-cli-scanner scan /tmp/examplevotingapp_vote.tar --standalone
31+
32+
2025-11-04T17:43:33-05:00 Starting analysis with Sysdig scanner version 1.23.0
33+
2025-11-04T17:43:33-05:00 Using local MainDB (skipping DB update)...
34+
2025-11-04T17:43:33-05:00 Done, using cached DB
35+
2025-11-04T17:43:33-05:00 Loading MainDB V3...
36+
2025-11-04T17:43:33-05:00 Done
37+
2025-11-04T17:43:33-05:00 Retrieving image...
38+
2025-11-04T17:43:44-05:00 Unable to get image, for additional information see the logs here: /Users/owner/Documents/Sysdig/example-voting-app/scan-logs. Exiting now
39+
owner@Owners-MacBook-Pro example-voting-app %
40+
owner@Owners-MacBook-Pro example-voting-app %
41+
owner@Owners-MacBook-Pro example-voting-app % ./sysdig-cli-scanner -a https://app.us4.sysdig.com/secure pull://nginx:latest
42+
zsh: no such file or directory: ./sysdig-cli-scanner
43+
owner@Owners-MacBook-Pro example-voting-app % sysdig-cli-scanner -a https://app.us4.sysdig.com/secure pull://nginx:latest
44+
Environment variable `SECURE_API_TOKEN` is required when standalone mode is not active. For usage help, please run with `--help`
45+
Cannot parse command line options
46+
owner@Owners-MacBook-Pro example-voting-app %
47+
owner@Owners-MacBook-Pro example-voting-app %
48+
owner@Owners-MacBook-Pro example-voting-app % export SECURE_API_TOKEN=b7de0bae-8dfd-4bfc-b372-2fb2bdf05918
49+
owner@Owners-MacBook-Pro example-voting-app % sysdig-cli-scanner -a https://app.us4.sysdig.com/secure pull://nginx:latest
50+
2025-11-04T17:47:03-05:00 Starting analysis with Sysdig scanner version 1.23.0
51+
2025-11-04T17:47:04-05:00 Retrieving MainDB...
52+
2025-11-04T17:47:04-05:00 Done, using cached DB
53+
2025-11-04T17:47:04-05:00 Loading MainDB V3...
54+
2025-11-04T17:47:04-05:00 Done
55+
2025-11-04T17:47:04-05:00 Retrieving image...
56+
2025-11-04T17:47:06-05:00 Done
57+
2025-11-04T17:47:06-05:00 Scan started...
58+
2025-11-04T17:47:10-05:00 Uploading image sbom to backend...
59+
2025-11-04T17:47:10-05:00 Uploading scanresult with sbom to backend...
60+
2025-11-04T17:47:11-05:00 Done
61+
2025-11-04T17:47:11-05:00 Total execution time 7.103295234s
62+
63+
Type: dockerImage
64+
ImageID: sha256:d261fd19cb63238535ab80d4e1be1d9e7f6c8b5a28a820188968dd3e6f06072d
65+
Digest: sha256:1beed3ca46acebe9d3fb62e9067f03d05d5bfa97a00f30938a0a3580563272ad
66+
BaseOS: debian 13.1
67+
PullString: nginx:latest
68+
69+
92 vulnerabilities found
70+
2 Critical (0 fixable)
71+
12 High (0 fixable)
72+
3 Medium (0 fixable)
73+
5 Low (0 fixable)
74+
70 Negligible (0 fixable)
75+
76+
POLICIES EVALUATION
77+
Policy: Sysdig Best Practices PASSED (0 failures - 0 risks accepted)
78+
79+
Policies evaluation PASSED at 2025-11-04T17:47:11-05:00
80+
Full image results here: https://app.us4.sysdig.com/secure/#/vulnerabilities/results/1874ef443ac59748faee8c01a82e2360/overview (id 1874ef443ac59748faee8c01a82e2360)
81+
Execution logs written to: /Users/owner/Documents/Sysdig/example-voting-app/scan-logs
82+
83+
84+
sysdig-cli-scanner -a https://app.us4.sysdig.com/secure pull://docker.io/dockersamples/examplevotingapp_vote:latest
85+
2025-11-04T17:49:47-05:00 Starting analysis with Sysdig scanner version 1.23.0
86+
2025-11-04T17:49:47-05:00 Retrieving MainDB...
87+
2025-11-04T17:49:47-05:00 Done, using cached DB
88+
2025-11-04T17:49:48-05:00 Loading MainDB V3...
89+
2025-11-04T17:49:48-05:00 Done
90+
2025-11-04T17:49:48-05:00 Retrieving image...
91+
2025-11-04T17:49:49-05:00 Done
92+
2025-11-04T17:49:49-05:00 Scan started...
93+
2025-11-04T17:49:52-05:00 Uploading image sbom to backend...
94+
2025-11-04T17:49:52-05:00 Uploading scanresult with sbom to backend...
95+
2025-11-04T17:49:53-05:00 Done
96+
2025-11-04T17:49:53-05:00 Total execution time 5.795543946s
97+
98+
Type: dockerImage
99+
ImageID: sha256:50482f268ba1f32ac1d4ff623cf76ad4d44a946d3d106db2a1fedbe8467abf7a
100+
Digest: sha256:7102d3b952ec84e3541ee12e7217e320c52aed60b13501c3158f46376a907466
101+
BaseOS: debian 12.7
102+
PullString: docker.io/dockersamples/examplevotingapp_vote:latest
103+
104+
181 vulnerabilities found
105+
8 Critical (5 fixable)
106+
41 High (27 fixable)
107+
49 Medium (33 fixable)
108+
10 Low (5 fixable)
109+
73 Negligible (0 fixable)
110+
111+
112+
PACKAGE TYPE VERSION SUGGESTED FIX CRITICAL HIGH MEDIUM LOW NEGLIGIBLE EXPLOIT
113+
libsqlite3-0 os 3.40.1-2 3.40.1-2+deb12u2 3 1 0 0 3 0
114+
libssl3 os 3.0.14-1~deb12u2 3.0.17-1~deb12u3 1 3 1 0 1 0
115+
openssl os 3.0.14-1~deb12u2 3.0.17-1~deb12u3 1 3 1 0 1 0
116+
perl-base os 5.36.0-7+deb12u1 5.36.0-7+deb12u2 1 2 0 0 2 0
117+
setuptools python 65.5.1 70.0.0 1 1 0 0 0 0
118+
libgnutls30 os 3.7.9-2+deb12u3 3.7.9-2+deb12u5 0 4 1 0 1 0
119+
libexpat1 os 2.5.0-1+deb12u1 2.5.0-1+deb12u2 0 4 0 0 2 0
120+
Jinja2 python 3.1.4 3.1.5 0 3 0 0 0 0
121+
libc-bin os 2.36-9+deb12u8 2.36-9+deb12u10 0 2 1 0 7 0
122+
libc6 os 2.36-9+deb12u8 2.36-9+deb12u10 0 2 1 0 7 0
123+
124+
POLICIES EVALUATION
125+
Policy: Sysdig Best Practices FAILED (55 failures - 0 risks accepted)
126+
127+
Policies evaluation FAILED at 2025-11-04T17:49:53-05:00
128+
Full image results here: https://app.us4.sysdig.com/secure/#/vulnerabilities/results/1874ef69f37af240c36eb62e30f4a0d0/overview (id 1874ef69f37af240c36eb62e30f4a0d0)
129+
Execution logs written to: /Users/owner/Documents/Sysdig/example-voting-app/scan-logs

0 commit comments

Comments
 (0)