undefined ref: cluster.skipfinalsnapshot.value

[dewa55]

Description

Hello,

I am running in pipeline trivy scan and I have started to get this error

2023-09-27T09:36:17.133Z	FATAL	image scan error: scan error: scan failed: failed analysis: analyze error: failed to analyze layer (sha256:b237bc5a2ac83b24ca6e6ecdc2a44cce4e2bf827595584811483c514af6111fd): post handler error: post handler error: misconfiguration scan error: scan config error: 4 errors occurred:
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:26: rego_type_error: undefined ref: cluster.skipfinalsnapshot.value
	cluster.skipfinalsnapshot.value
	        ^
##[error]Failed: Trivy detected problems.
	        have: "skipfinalsnapshot"
Publishing JSON results...
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:27: rego_type_error: undefined ref: cluster.skipfinalsnapshot
Done!
	cluster.skipfinalsnapshot
	        ^
	        have: "skipfinalsnapshot"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:26: rego_type_error: undefined ref: cluster.deletionprotection.value
	cluster.deletionprotection.value
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:27: rego_type_error: undefined ref: cluster.deletionprotection
	cluster.deletionprotection
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]

How can I fix this?

Desired Behavior

Trivy scan passing :D

Actual Behavior

I am getting this error:

2023-09-27T09:36:17.133Z	FATAL	image scan error: scan error: scan failed: failed analysis: analyze error: failed to analyze layer (sha256:b237bc5a2ac83b24ca6e6ecdc2a44cce4e2bf827595584811483c514af6111fd): post handler error: post handler error: misconfiguration scan error: scan config error: 4 errors occurred:
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:26: rego_type_error: undefined ref: cluster.skipfinalsnapshot.value
	cluster.skipfinalsnapshot.value
	        ^
##[error]Failed: Trivy detected problems.
	        have: "skipfinalsnapshot"
Publishing JSON results...
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:27: rego_type_error: undefined ref: cluster.skipfinalsnapshot
Done!
	cluster.skipfinalsnapshot
	        ^
	        have: "skipfinalsnapshot"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:26: rego_type_error: undefined ref: cluster.deletionprotection.value
	cluster.deletionprotection.value
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:27: rego_type_error: undefined ref: cluster.deletionprotection
	cluster.deletionprotection
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]

Reproduction Steps

I am using this task:

    - task: trivy@1
      displayName: Run Vulnerability Scan
      inputs:
        docker: false
        image: $(repository)
        #ignoreUnfixed: true
        exitCode: 0
        options: --timeout 10m0s

### Target

None

### Scanner

None

### Output Format

None

### Mode

None

### Debug Output

```bash
- analyze error:
    github.com/aquasecurity/trivy/pkg/fanal/artifact/image.Artifact.Inspect
        /home/runner/work/trivy/trivy/pkg/fanal/artifact/image/image.go:139
  - failed to analyze layer (sha256:b237bc5a2ac83b24ca6e6ecdc2a44cce4e2bf827595584811483c514af6111fd):
    github.com/aquasecurity/trivy/pkg/fanal/artifact/image.Artifact.inspect.func1
        /home/runner/work/trivy/trivy/pkg/fanal/artifact/image/image.go:242
  - post handler error:
    github.com/aquasecurity/trivy/pkg/fanal/artifact/image.Artifact.inspectLayer
        /home/runner/work/trivy/trivy/pkg/fanal/artifact/image/image.go:347
  - post handler error:
    github.com/aquasecurity/trivy/pkg/fanal/handler.Manager.PostHandle
        /home/runner/work/trivy/trivy/pkg/fanal/handler/handler.go:75
  - misconfiguration scan error:
    github.com/aquasecurity/trivy/pkg/fanal/handler/misconf.misconfPostHandler.Handle
        /home/runner/work/trivy/trivy/pkg/fanal/handler/misconf/misconf.go:45
  - scan config error:
    github.com/aquasecurity/trivy/pkg/misconf.(*Scanner).Scan
        /home/runner/work/trivy/trivy/pkg/misconf/scanner.go:300
  - 4 errors occurred:
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:26: rego_type_error: undefined ref: cluster.skipfinalsnapshot.value
	cluster.skipfinalsnapshot.value
	        ^
	        have: "skipfinalsnapshot"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/disable_cluster_skip_final_snapshot.rego:27: rego_type_error: undefined ref: cluster.skipfinalsnapshot
	cluster.skipfinalsnapshot
	        ^
	        have: "skipfinalsnapshot"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:26: rego_type_error: undefined ref: cluster.deletionprotection.value
	cluster.deletionprotection.value
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
policies/cloud/policies/aws/rds/enable_cluster_deletion_protection.rego:27: rego_type_error: undefined ref: cluster.deletionprotection
	cluster.deletionprotection
	        ^
	        have: "deletionprotection"
	        want (one of): ["backupretentionperioddays" "encryption" "engine" "instances" "performanceinsights" "publicaccess" "replicationsourcearn"]
Publishing JSON results...
Done!

### Operating System

Ubuntu

### Version

```bash
v0.38.2

Checklist

• Run trivy image --reset
• Read the troubleshooting

[simar7]

Dupe of #5258 please see my comment here #5258 (comment)

[dewa55]

Thanks