how we can scan images without proxy

[jainpratik163]

Description

we dont have internet. how we can scan not images.
and lets say we have to set proxy how we can pass via cli eg trivy --proxy abc.com

Desired Behavior

idealy we should pass proxy or scan without proxy

Actual Behavior

without internet scan is failing

Reproduction Steps

NA

Target

Container Image

Scanner

Vulnerability

Output Format

Table

Mode

Standalone

Debug Output

2026-02-21T14:16:30+02:00       INFO    [vulndb] Need to update DB
2026-02-21T14:16:30+02:00       INFO    [vulndb] Downloading vulnerability DB...
2026-02-21T14:16:30+02:00       INFO    [vulndb] Downloading artifact...        repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-02-21T14:16:30+02:00       FATAL   Fatal error     run error: init error: DB error: failed to download vulnerability DB: OCI artifact error: failed to download vulnerability DB: failed to download artifact from mirror.gcr.io/aquasec/trivy-db:2: OCI repository error: 1 error occurred:
        * Get "https://mirror.gcr.io/v2/": dial tcp: lookup mirror.gcr.io on 10.232.217.1:53: no such host

Operating System

Linux

Version

Version: 0.69.1

Checklist

• Run trivy clean --all
• Read the troubleshooting

[knqyf263]

Hi, thanks for reaching out.

Based on your debug output, it looks like DNS resolution for mirror.gcr.io is failing, which means your environment doesn't have direct internet access.

There are two common solutions depending on your setup:

1. If you have a proxy server

Trivy respects the standard proxy environment variables. You just need to set them before running Trivy:

export HTTP_PROXY=http://your-proxy:port
export HTTPS_PROXY=http://your-proxy:port
trivy image your-image

See the Troubleshooting documentation for more details.

2. If you have no internet access at all (air-gapped environment)

You need to download the vulnerability database on a machine that has internet access, then transfer it to your air-gapped environment.

Please follow the Air-Gapped Environment documentation for step-by-step instructions.

Hope this helps!

[jainpratik163]

thanks for the update , export proxy that i know , i was looking via trivy cli only if we can pass like trivy image your-image --proxy <proxy>

[knqyf263]

Trivy CLI doesn't have a CLI flag for proxy.

[jainpratik163]

can we add this feature in CLI?