Error parsing ImageID

[abessifi]

I've pulled the docker:7 image from dockerhub, push it to quay.io and then ran it ontop of OCP 4.4 (pod name: my-app).
According to Clair report, the image vulnerability level is medium, however CSO (v3.3.1) do not report anything about it and no ImageManifestVulnerability CR created too.

Here is the CSO logs:

level=debug msg="Pod added" key=foobar/my-app
E1217 17:54:19.403837       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:19.409121       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
level=debug msg="Pod updated" key=foobar/my-app
E1217 17:54:19.416671       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:19.419281       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
level=debug msg="Pod updated" key=foobar/my-app
E1217 17:54:19.442351       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:19.459549       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:19.619865       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:19.940132       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:20.580408       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
E1217 17:54:21.860687       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
level=debug msg="Pod updated" key=foobar/my-app
E1217 17:54:22.006919       1 labeller.go:191] foobar/my-app failed with : &{%!w(string=Pod phase not running: Pending)}
level=info msg="Requeued item" key=foobar/my-app
level=debug msg="Pod updated" key=foobar/my-app
level=info msg="Garbage collecting unreferenced ImageManifestVulns" key=foobar/my-app
time="2020-12-17T17:54:23Z" level=error msg="Invalid imageID format" digest="sha256:cf6386817001e153e30823a97d203bbe2cbbdd6bac9d15437e6f1aa89dc5c1f6" host="image-registry.openshift-image-registry.svc:5000" namespace=foobar repository=my-app validDigest=true validHost=false validNamespace=true validRepository=true
level=error msg="Error parsing imageID" imageID=image-registry.openshift-image-registry.svc:5000/foobar/my-app@sha256:cf6386817001e153e30823a97d203bbe2cbbdd6bac9d15437e6f1aa89dc5c1f6
level=info msg="Garbage collecting unreferenced ImageManifestVulns" key=foobar/my-app
time="2020-12-17T17:54:24Z" level=error msg="Invalid imageID format" digest="sha256:cf6386817001e153e30823a97d203bbe2cbbdd6bac9d15437e6f1aa89dc5c1f6" host="image-registry.openshift-image-registry.svc:5000" namespace=foobar repository=my-app validDigest=true validHost=false validNamespace=true validRepository=true
level=error msg="Error parsing imageID" imageID=image-registry.openshift-image-registry.svc:5000/foobar/my-app@sha256:cf6386817001e153e30823a97d203bbe2cbbdd6bac9d15437e6f1aa89dc5c1f6

Any help ?

[abessifi]

Same issue with Quay Container Security 3.3.4.

The error is raised when the image version is explicite: registry/image:x.y
and not raised if the image refenece is: registry/image or registry/image:latest

[abessifi]

The issue maybe related to an existing ImageStream that also reference the same image.
Tested also with CSO 3.4 and it works fine.