The Debian Package is not available

[alinex]

Description

By installing trivy like described in the documentation I get the following error:

$ LANG=C sudo apt-get install trivy
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be upgraded:
  trivy
1 upgraded, 0 newly installed, 0 to remove and 8 not upgraded.
Need to get 48.3 MB of archives.
After this operation, 1307 kB disk space will be freed.
Err:1 https://aquasecurity.github.io/trivy-repo/deb noble/main amd64 trivy amd64 0.69.4
  404  Not Found [IP: 185.199.110.153 443]
E: Failed to fetch https://aquasecurity.github.io/trivy-repo/deb/pool/main/t/trivy/trivy_0.69.4_amd64.deb  404  Not Found [IP: 185.199.110.153 443]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
```

### Desired Behavior

Should install/update trivy

### Actual Behavior

Broken Installation, could not get trivy debian poackage.

### Reproduction Steps

```bash
sudo apt-get install wget gnupg
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg > /dev/null
echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" | sudo tee -a /etc/apt/sources.list.d/trivy.list
sudo apt-get update
sudo apt-get install trivy
```


### Target

Git Repository

### Scanner

None

### Output Format

None

### Mode

None

### Debug Output

```bash
It's not a trivy problem itself.
```


### Operating System

Debian 12

### Version

```bash
0.69.4
```


### Checklist

- [ ] Run `trivy clean --all`
- [ ] Read [the troubleshooting](https://trivy.dev/docs/latest/references/troubleshooting/)

[twissi85]

@alinex the version 0.69.4 was compromised, see Trivy ecosystem supply chain temporarily compromised

[agurgel-te]

The recommendation is to use 0.69.3 or earlier, but:

~ ❯ sudo apt install trivy=0.69.3
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Package trivy is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Version '0.69.3' for 'trivy' was not found

I resorted to installing the 0.69.3 DEB downloaded from GitHub, but now upgrades are broken on my entire system until Trivy publishes a new tag:

~ ❯ sudo apt upgrade --yes
<...>
The following packages will be upgraded:
  trivy
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 48.3 MB of archives.
After this operation, 1,307 kB disk space will be freed.
Err:1 https://aquasecurity.github.io/trivy-repo/deb generic/main amd64 trivy amd64 0.69.4
  404  Not Found [IP: 185.199.108.153 443]
E: Failed to fetch https://aquasecurity.github.io/trivy-repo/deb/pool/main/t/trivy/trivy_0.69.4_amd64.deb  404  Not Found [IP: 185.199.108.153 443]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
~ ❯ apt-cache policy trivy
trivy:
  Installed: 0.69.3
  Candidate: 0.69.4
  Version table:
     0.69.4 500
        500 https://aquasecurity.github.io/trivy-repo/deb generic/main amd64 Packages
 *** 0.69.3 100
        100 /var/lib/dpkg/status

[DmitriyLewen]

Hello all
Did you update Trivy repo (i am not sure, but perhaps apt-get update may help)?

I tried to add repo in ubuntu image and repo works correctly:

➜  aquasecurity docker run -it --rm ubuntu:24.04
root@1b059c6136d1:/# apt-get update
...
root@1b059c6136d1:/# apt-get install wget gnupg
...
root@1b059c6136d1:/# wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | tee /usr/share/keyrings/trivy.gpg > /dev/null
root@1b059c6136d1:/# echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" | tee -a /etc/apt/sources.list.d/trivy.list
deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main
root@1b059c6136d1:/# apt-get update
Get:1 https://aquasecurity.github.io/trivy-repo/deb generic InRelease [3063 B]
Hit:2 http://ports.ubuntu.com/ubuntu-ports noble InRelease
Get:3 https://aquasecurity.github.io/trivy-repo/deb generic/main arm64 Packages [369 B]
Hit:4 http://ports.ubuntu.com/ubuntu-ports noble-updates InRelease
Hit:5 http://ports.ubuntu.com/ubuntu-ports noble-backports InRelease
Hit:6 http://ports.ubuntu.com/ubuntu-ports noble-security InRelease
Fetched 3432 B in 1s (2810 B/s)
Reading package lists... Done
root@1b059c6136d1:/# apt-get install trivy
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following NEW packages will be installed:
  trivy
0 upgraded, 1 newly installed, 0 to remove and 10 not upgraded.
Need to get 43.9 MB of archives.
After this operation, 152 MB of additional disk space will be used.
Get:1 https://aquasecurity.github.io/trivy-repo/deb generic/main arm64 trivy arm64 0.69.3 [43.9 MB]
Fetched 43.9 MB in 10s (4611 kB/s)                                             
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package trivy.
(Reading database ... 5215 files and directories currently installed.)
Preparing to unpack .../trivy_0.69.3_arm64.deb ...
Unpacking trivy (0.69.3) ...
Setting up trivy (0.69.3) ...

[agurgel-te]

Cleaning out /var/lib/apt/lists/*trivy* got me unstuck:

~ ❯ sudo rm /var/lib/apt/lists/*trivy*
~ ❯ sudo apt update                   
<...>
Get:2 https://aquasecurity.github.io/trivy-repo/deb generic InRelease [3,063 B]
<...>
Get:15 https://aquasecurity.github.io/trivy-repo/deb generic/main amd64 Packages [367 B]
<...>                                                                  
Get:18 https://aquasecurity.github.io/trivy-repo/deb generic/main i386 Packages [369 B]
<...>
Fetched 3,799 B in 1s (3,159 B/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
~ ❯ apt-cache policy trivy            
trivy:
  Installed: 0.69.3
  Candidate: 0.69.3
  Version table:
 *** 0.69.3 500
        500 https://aquasecurity.github.io/trivy-repo/deb generic/main amd64 Packages
        100 /var/lib/dpkg/status