Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scan action fails decode syft-json document #298

Closed
hkadakia opened this issue Mar 15, 2024 · 3 comments
Closed

Scan action fails decode syft-json document #298

hkadakia opened this issue Mar 15, 2024 · 3 comments

Comments

@hkadakia
Copy link

hkadakia commented Mar 15, 2024

Seeing the below issue when running scan-action

Run anchore/sbom-action@9fece9e20048ca9590af301449208b2b8861333b
  with:
    image: nginx:latest
    format: syft-json
    output-file: /tmp/sbom.syft.json

Run anchore/scan-action@3343887d815d7b07465f6fdcd395bd66508d486a
  with:
    fail-build: false
    sbom: /tmp/sbom.syft.json
    output-format: json

Executing: grype -o json --fail-on medium sbom:/tmp/sbom.syft.json
  1 error occurred:
  	* failed to catalog: unable to decode sbom: unable to decode syft-json document: json: cannot unmarshal object into Go struct field Document.artifacts of type string

Syft/Sbom-action version: 9fece9e20048ca9590af301449208b2b8861333b (v0.15.9)
Grype/Scan-action version: 3343887 (v3.6.4)

@popey
Copy link
Contributor

popey commented Jul 11, 2024

Hi @hkadakia - thanks so much for filing this issue. Apologies for the delay getting back to you.
We have some confidence that this should be resolved in a newer release, but some more testing is required. Are you still seeing this behavior with the latest releases of sbom-action and scan-action?

@popey
Copy link
Contributor

popey commented Jul 25, 2024

Hi @hkadakia - I'm going to close this issue, feel free to re-open or start a new one if this is an issue with the currently released version.

@popey popey closed this as completed Jul 25, 2024
@hkadakia
Copy link
Author

Yes I haven't noticed any issues so far.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants