Skip to content

Terraform xray provider stuck generating xray_vulnerabilities_report #302

@shwetajfrog

Description

@shwetajfrog

Describe the bug

When generating Xray reports from Terraform using the Xray Terraform provider, there is a limitation of a maximum of 100 reports. To work around this, we forced to include numerous patterns in a single report to cover our deployed Docker images. The xray_vulnerabilities_report functions well when scanning a repository with include_path_patterns, provided the pattern list is small. However, as the list grows to a medium or large size, the Xray provider takes an extremely long time to generate the Terraform plan. Eventually, when applying the plan, it fails with a provider error. I have tested this behavior across multiple Xray provider versions (3.0.x, 2.13.x, and 2.12.x), and the outcome remains the same: the plan takes ages to generate, appears correct, but ultimately fails.

Requirements for and issue

  • Your version of Artifactory (you can curl it at $host/artifactory/api/system/version) :latest
  • Is your Artifactory Cloud or Self-Hosted : Self hosted

Expected behavior
We should be able to create vulnerability report having numerous patterns via terraform and there shouldn't be any limitation to it

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions