-
Notifications
You must be signed in to change notification settings - Fork 14
Description
Describe the bug
When generating Xray reports from Terraform using the Xray Terraform provider, there is a limitation of a maximum of 100 reports. To work around this, we forced to include numerous patterns in a single report to cover our deployed Docker images. The xray_vulnerabilities_report functions well when scanning a repository with include_path_patterns, provided the pattern list is small. However, as the list grows to a medium or large size, the Xray provider takes an extremely long time to generate the Terraform plan. Eventually, when applying the plan, it fails with a provider error. I have tested this behavior across multiple Xray provider versions (3.0.x, 2.13.x, and 2.12.x), and the outcome remains the same: the plan takes ages to generate, appears correct, but ultimately fails.
Requirements for and issue
- Your version of Artifactory (you can
curl
it at$host/artifactory/api/system/version
) :latest - Is your Artifactory Cloud or Self-Hosted : Self hosted
Expected behavior
We should be able to create vulnerability report having numerous patterns via terraform and there shouldn't be any limitation to it