Trivy scan started failing recently for html format

[SaurabhYadav-Savy]

Hello,
Recently trivy scan started failing for format template, specifically for html.tpl.
Few days back it was working fine.

Here is the relevant details I'm using in the workflow

     uses: aquasecurity/trivy-action@master
      with:
        scan-type: image
        format: 'template'
        template: '@/contrib/html.tpl'
        output: 'trivy-results.html

Getting error: Fatal error report error: unable to write results: failed to initialize template writer: error retrieving template from path: open /contrib/html.tpl: no such file or directory
Error: Process completed with exit code 1.

[matteovivona]

I have the same issue. I rolled back to 0.24.0

[ruben-hoenle-fnt]

same here

[mat-sylvia-mark43]

I think this is related to my issue from the latest release:
#408 (comment)

[simar7]

@DmitriyLewen I would assume this is because the templates used to exist in the Trivy docker image but not by default in the composite action?

[DmitriyLewen]

@simar7 you are right.
install script doesn't copy contrib dir...
I can copy contrib dir in setup-trivy.
But I can't select better best to do this.
By default we install Trivy into $HOME/.local/bin/trivy-bin directory.
I can keep contrib in this dir, but i am not sure that this is user friendly.

@simar7 wdyt?

[simar7]

@simar7 you are right. install script doesn't copy contrib dir... I can copy contrib dir in setup-trivy. But I can't select better best to do this. By default we install Trivy into $HOME/.local/bin/trivy-bin directory. I can keep contrib in this dir, but i am not sure that this is user friendly.

@simar7 wdyt?

Yes I understand. I think it's the best option for now.