eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Fix trivy CVE DB downloads in zot LaunchAgent

Browse source 
The LaunchAgent's default PATH (/usr/bin:/bin:/usr/sbin:/sbin) doesn't
include /usr/local/bin where docker-credential-desktop lives. Trivy's
OCI client reads ~/.docker/config.json which specifies credsStore:desktop,
then fails to find the credential helper. Add /usr/local/bin to PATH.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-03-14 09:54:10 -07:00
commit 3725d0873f
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/changelog.d/bump-zot-v2.1.15.infra.md
View file

@ -1 +1 @@
Upgrade zot container registry from v2.1.13 to v2.1.15 (CVE-2025-30204, open redirect fix)
Upgrade zot container registry from v2.1.13 to v2.1.15 (CVE-2025-30204, open redirect fix). Fix trivy CVE DB downloads by adding /usr/local/bin to LaunchAgent PATH.