# Trivy plugin failing with 404 error

- Provider: [Spacelift](https://down.guide/spacelift)
- Level: confirmed
- Impact: Degraded
- lasted 1h 4m
- started 2026-03-02 12:59 UTC
- id: DWN-9d5edced83
- Official page: https://stspg.io/q8vcktjghbgp

## Updates from Spacelift
### 2026-03-02 12:59 UTC: identified
The Trivy Spacelift plugin is currently causing runs to fail during the Initializing phase due to a security incident from Trivy (https://github.com/aquasecurity/trivy/discussions/10265) that caused GitHub release artifacts to be deleted. We have identified the issue and are currently working on deploying a fix.

### 2026-03-02 14:03 UTC: resolved
This incident has been resolved. See the postmortem for resolution instructions.

### 2026-03-02 14:53 UTC: postmortem
📣 Trivy Plugin Action Required
If you're using the previous version of the Trivy plugin, runs may fail during initialization due to missing release artifacts following a security incident in the upstream Trivy project \\(details here: \[https://github.com/aquasecurity/trivy/discussions/10265\](https://github.com/aquasecurity/trivy/discussions/10265)\\).
We've updated the Spacelift Trivy plugin to \*\*v0.69.2\*\* and rolled the fix out to production - everything is now working as expected.
To make sure your stacks use the updated version:
1. Go to \*\*Plugins → Account plugins\*\* and delete the existing Trivy plugin
2. Go to \*\*Plugins → Templates\*\* and install the Trivy plugin again
Once done, all new runs will automatically use the fixed version. 
Thanks for your patience, and as always, reach out to support if you need anything.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).