Get "https://ghcr.io/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority

[LehlohonoloPsybergate]

Am using running @Trivy inside a pipeline
- task: trivy@1 displayName: Scan image with Trivy inputs: loginDockerConfig: true ignoreUnfixed: true severities: HIGH,CRITICAL image: ${{ parameters.registryEndpoint }}/${{ parameters.imageName }}:$(tagToScan) options: --timeout 20m --ignorefile ${{ parameters.trivyIgnoreFile }} # add a trivyignore file to your repo with the CVE codes that you want to ignore e.g. # CVE-2023-0464 (default path is ".trivyignore") debug: ${{ parameters.trivyDebug }}

and am getting this error
Digest: sha256:275243b81dcc2728dd9b54125f62fa636528364f8d44b88b7d72ef47ac6ad86d Status: Downloaded newer image for aquasec/trivy:latest 2023-11-08T08:19:21.584Z WARN '--security-checks' is deprecated. Use '--scanners' instead. 2023-11-08T08:19:21.593Z INFO Need to update DB 2023-11-08T08:19:21.593Z INFO DB Repository: ghcr.io/aquasecurity/trivy-db 2023-11-08T08:19:21.593Z INFO Downloading DB... 2023-11-08T08:19:21.697Z FATAL init error: DB error: failed to download vulnerability DB: database download error: OCI repository error: 1 error occurred: * Get "[https://ghcr.io/v2/"](https://ghcr.io/v2/%22): tls: failed to verify certificate: x509: certificate signed by unknown authority
please assist

[wablo]

Hi @LehlohonoloPsybergate ,
Your pipeline running in self-hosted environment?The environment using a proxy to connect to the Internet? Can you check the network connectivity with curl command for example curl -vvv https://ghcr.io