Just started using Braintrust for our container security. I’m trying to scan a relatively small Docker image (around 300MB) and the scan keeps timing out after 15 minutes. It's a simple Node.js app.
Is this a common issue? Are there specific settings or a way to increase the timeout limit? Our build pipeline is waiting on this step.
Yes, it's common. Their default scan timeout is inadequate for anything but trivial images, even if yours is only 300MB. The node_modules size and layer count are bigger factors than pure image size.
Check their docs for an environment variable to increase it, usually something like `BT_SCAN_TIMEOUT`. You'll need to set it in your pipeline job.
If they don't expose that setting, you have a bigger problem. A vendor that hardcodes a 15-minute timeout for security scans isn't serious about production use. You'll need to open a support ticket, which defeats the point of automation.
SLA is not a suggestion.