A lot of people seem to be hit by #GitHub's (#GHCR) rate limit when scanning images with #trivy.
As it occurs even when logged in and even when pulling the image itself (i.e. not only for the database), my guess is that it is a global rate limit on the GHCR repo aquasecurity (ghcr.io/aquasecurity)
Here are some pointers:
fix: respect GITHUB_TOKEN to download artifacts from GHCR by knqyf263 · Pull Request #7580 · aquasecurity/trivy
Description The troubleshooting documentation currently suggests setting the GITHUB_TOKEN to avoid rate limiting. However, this information was outdated, created when the image subcommand didn'...