A lot of people seem to be hit by #GitHub's (#GHCR) rate limit when scanning images with #trivy.

As it occurs even when logged in and even when pulling the image itself (i.e. not only for the database), my guess is that it is a global rate limit on the GHCR repo aquasecurity (ghcr.io/aquasecurity)

Here are some pointers:

https://github.com/aquasecurity/trivy/pull/7580

https://github.com/orgs/community/discussions/139074

fix: respect GITHUB_TOKEN to download artifacts from GHCR by knqyf263 · Pull Request #7580 · aquasecurity/trivy

Description The troubleshooting documentation currently suggests setting the GITHUB_TOKEN to avoid rate limiting. However, this information was outdated, created when the image subcommand didn'...

GitHub