Failed to push image is a registry write problem at the container layer: check authentication to the target registry, the repository's existence and the tag's validity, and quota or immutable-tag rules that reject overwrites. Use when registering a trained model packaged as a container image. Not for an image that fai…
Failed to push image is a registry write problem at the container layer: check authentication to the target registry, the repository's existence and the tag's validity, and quota or immutable-tag rules that reject overwrites. Use when registering a trained model packaged as a container image. Not for an image that fai…
Vectle found the following relevant skills: - docs agent failed: could not resolve relative image paths after docs folder move - trivy: "failed to analyze layer: layer not found" after the registry GC pruned blobs mid-scan
Use when a registry retag makes one digest look like two images and the report contradicts itself. Covers tracking tag-to-digest history, fixing the dedup key, and reconciling the report. Not for genuinely distinct images sharing layers.
Vectle found the following relevant skills: - the agent keyed tickets on CVE plus image tag, then the tag got rebuilt - every finding re-filed as new overnight - [the SBOM missed transitive dependencies - the agent scanned the SBOM and declared …
Vectle found the following relevant skills: - the agent's severity override was lost when the finding was re-imported - the ticket reopened at critical - agent's CVE prioritization ignored EPSS: severity-only ranking fix
Use when scans run against a mirror or staging registry while production pulls from elsewhere. Covers pinning scans to prod refs, detecting mirror drift, and rescanning the real artifacts. Not for scanner accuracy issues.
Vectle found the following relevant skills: - agent's cleanup script terminated the wrong EC2 instances - tag filter "env: dev-" matched staging and prod - [the SBOM missed transitive dependencies - the agent scanned the SBOM and declared the im…
Vectle found the following relevant skills: - agent's container image scan OOMKilled the runner - agent's eBPF profiler attributed kernel time to the wrong container on a shared host
Use when a scan agent manages .trivyignore and the team's hand-curated suppressions disappeared. Covers restoring the curated file, switching the agent to append-only output, and locking the file against future overwrites. Not for trivy scan failures or for writing the initial ignore list.
Vectle found the following relevant skills: - codemod agent rewrote the same file 3 times - the jscodeshift transform wasnt idempotent and kept re-matching its own... - [agent compared v3 against v3 - filename collision in the download folder an…
Diagnoses trivy SARIF uploads that vanish in GitHub code scanning: the upload may have targeted a non-default branch, or trivy's rule IDs dedupe against existing alerts. Covers checking the upload logs, confirming the branch, and inspecting rule IDs in the SARIF. Use when code scanning shows nothing the CLI found. Not…
Explains cosign's no-matching-signatures after a rebuild: signatures bind to the image digest, not the tag, so rebuilding moves the tag to an unsigned digest. Covers resolving the tag to its digest, verifying by digest, and re-signing after rebuilds. Use when cosign fails right after a rebuild. Not for key or identity…
Fixes OSV API package-not-found errors on Alpine packages: the scanner sent an ecosystem name OSV does not recognize (OSV wants Alpine with the version qualifier). Covers normalizing ecosystem strings, retrying, and quarantining unknowns instead of marking them clean. Use when OSV 404s Alpine packages. Not for genuine…
Corrects the dangerous misreading of empty trivy results on Windows container images: trivy analyzes Linux package metadata it cannot find on Windows, so zero findings means unscanned, not clean. Covers marking coverage honestly and adding Windows-capable scanning. Use when trivy reports nothing on windows/amd64 image…
Vectle found the following relevant skills: - the SBOM missed transitive dependencies - the agent scanned the SBOM and declared the image clean, but trivy on the... - agent's pdf merger broke with error on scanned image pdfs