x509 errors when scanning with insecure=true

[darren128]

I'm running trivy operator and we're using artifactory that is signed with an older entrust ca that is no longer present in the recent versions of trivy.

I tried to run with insecure and it's still failing ca check.

I have read through the docs and still don't understand how to inject a custom ca into the list of ca certs.

Thanks for the help!

[afdesk]

@darren128 thanks for the report
it looks like duplicate #2295

it should be fixed #2228 and will be included in the next release

[darren128]

Thanks @afdesk but that looks like it's related to pulling the policy bundles.

I am running all images in a k8s cluster pulling from artifactory, this is a trivy image ... issue.

[afdesk]

oh, I got it. need to investigate