DmitriyLewen

No problem! Thank you for helping uncover this issue and for your attempt to solve it! I’ve created #9815 for it.

Hello @Dr-DevOps IIUC your action doesn't have `bash`, right? IN this case you can install `trivy` yourself and run `trivy-action` with `skip-setup-trivy` input. See this example - https://github.com/aquasecurity/trivy-action?tab=readme-ov-file#setting-up-trivy-manually

Hello @Dr-DevOps You got same error for `aquasecurity/[email protected]`, right? ___ > labels: [self-hosted,image-builder] You use self-hosted runner. Your runner doesn't have `bash`. So i see 2 ways: - add step...

Hello @Anwesh-Mahapatra Thanks for your work! We already have PR with this update - https://github.com/aquasecurity/trivy/pull/8689 You can compare code and read comments. Regards, Dmitriy

I think it’s worth clarifying a few details, since there seems to be some confusion among users. This issue only affects parameters that can be set exclusively via the config...

Hi @AndreOganesian, Thank you for your work. I'm not sure deduplication is what we want in these cases. On the contrary — we probably need to *separate* these packages. Let’s...

> Also to clarify Dmitriy's original point, the current state of Trivy is already doing deduplication and only using one of the chainguard or wolfi if both appear. This change...

Hello @joda-work We’re currently focused on higher-priority tasks. Please be patient — we’ll get back to this PR as soon as we have time. Regards, Dmitriy

@xrow yeah - this is also solution. Added in Description. Thanks!

@knqyf263 I created PR with your idea (https://github.com/aquasecurity/trivy/pull/7879#issuecomment-3574120751) take a look, when you have time, please