failed to compile fetched bundle

[chris-rock]

What is not working as you expected it?

Start a fresh container and install cnspec:

root@6bc492fbf5d2:/# cnspec scan local
! can't find any paths for providers, none are configured system-path=/opt/mondoo/providers
→ installing provider 'os' version=11.3.19
→ successfully installed os provider path=/opt/mondoo/providers/os version=11.3.19
→ no Mondoo configuration file provided, using defaults
! No credentials provided. Switching to --incognito mode.
→ discover related assets for 1 asset(s)

 6bc492fbf5d2 ────────────────────────────────────────────────    X score: X


Asset: (Ubuntu 22.04.3 LTS) 6bc492fbf5d2
----------------------------------------

error: failed to compile fetched bundle: failed to compile filters for query //local.cnspec.io/run/local-execution/queries/mondoo-kubernetes-security-pod-runasnonroot
failed to compile filters for query //local.cnspec.io/run/local-execution/queries/mondoo-kubernetes-security-cronjob-runasnonroot
failed to compile filters for query //local.cnspec.io/run/local-execution/queries/mondoo-kubernetes-security-job-runasnonroot


Scanned 1 asset

Ubuntu 22.04.3 LTS
    X           6bc492fbf5d2

Where on the platform does it happen?

It happens on all platforms where no authentication to the Mondoo platform is avaiable.

How do we replicate the issue?

1. Start a container
2. Install cnspec
3. Run the scan

Expected behavior (i.e. solution)

Scan runs through

Other Comments

[chris-rock]

The workaround is to

git clone [email protected]:mondoohq/cnspec-policies.git
cnspec scan -f core/{policy}.mql.yaml

[ehaselwanter]

thx