Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terraform xray provider stuck generating xray_vulnerabilities_report #302

Open
2 tasks
shwetajfrog opened this issue Jan 30, 2025 · 1 comment
Open
2 tasks
Assignees
Labels
bug Something isn't working

Comments

@shwetajfrog
Copy link

shwetajfrog commented Jan 30, 2025

Describe the bug

When generating Xray reports from Terraform using the Xray Terraform provider, there is a limitation of a maximum of 100 reports. To work around this, we forced to include numerous patterns in a single report to cover our deployed Docker images. The xray_vulnerabilities_report functions well when scanning a repository with include_path_patterns, provided the pattern list is small. However, as the list grows to a medium or large size, the Xray provider takes an extremely long time to generate the Terraform plan. Eventually, when applying the plan, it fails with a provider error. I have tested this behavior across multiple Xray provider versions (3.0.x, 2.13.x, and 2.12.x), and the outcome remains the same: the plan takes ages to generate, appears correct, but ultimately fails.

Requirements for and issue

  • Your version of Artifactory (you can curl it at $host/artifactory/api/system/version) :latest
  • Is your Artifactory Cloud or Self-Hosted : Self hosted

Expected behavior
We should be able to create vulnerability report having numerous patterns via terraform and there shouldn't be any limitation to it

@shwetajfrog shwetajfrog added the bug Something isn't working label Jan 30, 2025
@alexhung
Copy link
Member

@shwetajfrog Thanks for the report! I've added this to our plan to investigate and fix.

@alexhung alexhung transferred this issue from jfrog/terraform-provider-platform Feb 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants