error parsing template: template: output template:1297: function "className" not defined

[devopsmash]

Description

When I'm trying to generate an html report from Trivy I'm getting the following error:

2024-09-18T11:42:07Z    FATAL   Fatal error     report error: unable to write results: failed to initialize template writer: error parsing template: template: output template:1297: function "className" not defined

Desired Behavior

should output html report

Actual Behavior

error

Reproduction Steps

1. cd /usr/local/bin
2. wget https://github.com/aquasecurity/trivy/blob/main/contrib/html.tpl
3. podman image mount `myimg:mytag`
4. trivy filesystem --timeout=100s --scanners vuln --pkg-types library --severity HIGH,CRITICAL --exit-code 1 --no-progress  --template "@/usr/local/bin/html.tpl" --format template -o report.html /var/lib/containers/storage/overlay/<somd id>/merged

Target

None

Scanner

None

Output Format

None

Mode

None

Debug Output

2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/@casl/ability/extra/package.json" err="unable to parse \"home/myuser/app/node_modules/@casl/ability/extra/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/build/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/build/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/core/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/core/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/max/metadata/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/max/metadata/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/max/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/max/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/min/metadata/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/min/metadata/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/min/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/min/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/mobile/examples/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/mobile/examples/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/mobile/metadata/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/mobile/metadata/package.json\": Name can only contain URL-friendly characters"
2024-09-18T11:47:30Z    DEBUG   Walk error      file_path="home/myuser/app/node_modules/libphonenumber-js/mobile/package.json" err="unable to parse \"home/myuser/app/node_modules/libphonenumber-js/mobile/package.json\": Name can only contain URL-friendly characters"

Operating System

debian

Version

Version: 0.54.1
Vulnerability DB:
  Version: 2
  UpdatedAt: 2024-09-18 06:12:11.663251714 +0000 UTC
  NextUpdate: 2024-09-18 12:12:11.663251584 +0000 UTC
  DownloadedAt: 2024-09-18 10:46:42.44709912 +0000 UTC

Checklist

• Run trivy clean --all
• Read the troubleshooting

[DmitriyLewen]

Hello @devopsmash
Thanks for your report!

You use old template file:

2. wget https://github.com/aquasecurity/trivy/blob/main/contrib/html.tpl

You download file into current directory.

4. trivy filesystem --timeout=100s --scanners vuln --pkg-types library --severity HIGH,CRITICAL --exit-code 1 --no-progress --template "@/usr/local/bin/html.tpl"

But you use template from /usr/local/bin/html.tpl.

Regards, Dmitriy