goharbor/harbor

failed to download vulnerability DB

Open

#23,521 opened on Jul 8, 2026

View on GitHub
 (7 comments) (0 reactions) (0 assignees)Go (5,235 forks)batch import
help wantedkind/question

Repository metrics

Stars
 (28,490 stars)
PR merge metrics
 (Avg merge 8d 17h) (74 merged PRs in 30d)

Description

I have a namespace named harbor in my k8s cluster. trivy returns an error and does not find vulnerabilities in the images:

{"error":"running trivy wrapper: running trivy: exit status 1: 2026-07-08T13:10:44.337Z\t\u001b[34mINFO\u001b[0m\tNeed to update DB\n2026-07-08T13:10:44.337Z\t\u001b[34mINFO\u001b[0m\tDownloading DB...\n2026-07-08T13:11:15.867Z\t\u001b[31mFATAL\u001b[0m\tfailed to download vulnerability DB: failed to download vulnerability DB: DB file not found\n","level":"error","msg":"Scan job failed","scan_job_id":"7ac89af31d68e0b3cb4265d7","time":"2026-07-08T13:11:16Z"}.

If I go to the node where the scanner is located and checked the availability of remote resources:

[root@node7 ~]# curl -k  https://ghcr.io/aquasecurity/trivy-db:2
[root@node7 ~]# curl -k  https://ghcr.io/v2/
[root@node7 ~]# curl -k  https://github.com
[root@node7 ~]# curl -k  https://api.github.com
[root@node7 ~]# curl -k github-releases.githubusercontent.com

and

# curl -k https://140.82.121.33/
<!DOCTYPE html><title>Not Found</title>
<body>The requested URL is was not found.</body>
</html>

<html>
  <head>
    <meta content="origin" name="referrer">
    <title>Not Found &middot; GitHub</title>
    <meta name="viewport" content="width=device-width">
    <style type="text/css" media="screen">
      body {
        background-color: #f6f8fa;
        color: rgba(0, 0, 0, 0.5);
        font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol;
        font-size: 14px;
        line-height: 1.5;
      }
      .c { margin: 50px auto; max-width: 600px; text-align: center; padding: 0 24px; }
      a { text-decoration: none; }
      a:hover { text-decoration: underline; }
      h1 { color: #24292e; line-height: 60px; font-size: 48px; font-weight: 300; margin: 0px; }
      p { margin: 20px 0 40px; }
      #s { margin-top: 35px; }
      #s a {
        color: #666666;
        font-weight: 200;
        font-size: 14px;
        margin: 0 10px;
      }
    </style>
  </head>
  <body>
    <div class="c">
      <h1>Whoa there!</h1>
      <p>The requested URL is was not found.
      </p>
      <div id="s">
        <a href="https://support.github.com">Contact Support</a> &mdash;
        <a href="https://githubstatus.com">GitHub Status</a> &mdash;
        <a href="https://twitter.com/githubstatus">@githubstatus</a>
      </div>
    </div>
  </body>
</html>

and

curl -k https://api.github.com/repos/aquasecurity/trivy-db/releases same works

I found a solution Here but I don't know how to apply it.

Can you help with the solution?

Contributor guide