trivy scanning vulnerabilities for wazuh-manager 4.3.8 to 4.4.4 docker image failed

[Ciocoiu Petrisor]

Hi team,

Do you know that wazuh-manager 4.3.8 to 4.4.4 docker image cannot be passed by Trivy due to the "HIGH: AsymmetricPrivateKey (private-key)" found on path "/var/ossec/etc/sslmanager.key:" ?

Is there a solution to be passed by the Trivy ?

Thanks

[Javier Sanchez Gil]

Hi Ciocoiu.

It seems, as seen here https://github.com/wazuh/wazuh-docker/actions/workflows/trivy.yml, that Trivy is currently only tested with wazuh-docker 4.3.

Could you please share the logs regarding this issue with me?