不能用trivy扫描局部码头图像

Question

我试图找出在本地码头图像上使用trivy的漏洞，但是我得到了这个错误。

docker run aquasec/trivy:0.28.0 image ansys/twindeployer/runtime-vnc:7005166

11s2022-05-19T22:22:02.519Z   FATAL   image scan error: scan error: unable to initialize a scanner: unable to initialize a docker scanner: 3 errors occurred:
    * unable to inspect the image (ansys/twindeployer/runtime-vnc:7005166): Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?
    * unable to initialize Podman client: no podman socket found: stat podman/podman.sock: no such file or directory
    * GET https://index.docker.io/v2/ansys/twindeployer/runtime-vnc/manifests/7005166: UNAUTHORIZED: authentication required; [map[Action:pull Class: Name:ansys/twindeployer/runtime-vnc Type:repository]]

Answer 1

对于这个问题，有一个类似的问题：Scanning local docker image for vulnerability using Trivy gives unauthorized

你必须改变你的命令：

docker run  -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:0.28.0 image ansys/twindeployer/runtime-vnc:7005166