GitHub Advisory Mirror fails due to PostgreSQL connection reset during GHSA sync

[namnhat239]

Summary
While mirroring GitHub Security Advisories (GHSAs), the GitHubAdvisoryMirrorTask fails with a PostgreSQL Connection reset / SQLSTATE 08006 error during insert into the VULNERABILITY table.
The task aborts after partially processing advisories and does not commit the last modification timestamp, causing repeated failures on subsequent runs.
Environment

• Task: GitHubAdvisoryMirrorTask
• Database: PostgreSQL
• Connection Pool: HikariCP
• Deployment: Kubernetes
• Here my config for DB connection:
  • name: ALPINE_DATABASE_POOL_ENABLED
    value: "true"
  • name: ALPINE_DATABASE_POOL_MAX_SIZE
    value: "50"
  • name: ALPINE_DATABASE_POOL_MIN_IDLE
    value: "10"
  • name: ALPINE_DATABASE_POOL_CONNECTION_TIMEOUT
    value: "30000"
  • name: ALPINE_DATABASE_POOL_IDLE_TIMEOUT
    value: "300000"
  • name: ALPINE_DATABASE_POOL_MAX_LIFETIME
    value: "600000"

Detail Log job

[GitHubAdvisoryMirrorTask] Mirroring GHSAs that were modified since 2026-03-20T21:32:24Z
2026-04-08 05:46:30,465 INFO [GitHubAdvisoryMirrorTask] Mirrored 1/1368 GHSAs (0%); Last committed modification timestamp: null
2026-04-08 05:46:31,336 WARN [GitHubAdvisoryMirrorTask] Unrecognized ecosystem ACTIONS; Assuming PURL type generic for Package{ecosystem='ACTIONS', name='SHAdd0WTAka/Zen-Ai-Pentest'} [vulnId=GHSA-f67f-hcr6-94mf]
2026-04-08 05:46:31,544 WARN [ProxyConnection] transactional - Connection org.postgresql.jdbc.PgConnection@4c290489 marked as broken because of SQLSTATE(08006), ErrorCode(0) [vulnId=GHSA-24rp-q3w6-vc56]
org.postgresql.util.PSQLException: An I/O error occurred while sending to the backend.
 at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:399)
 at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:525)
 at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:435)
 at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:196)
 at org.postgresql.jdbc.PgPreparedStatement.executeUpdate(PgPreparedStatement.java:157)
 at com.zaxxer.hikari.pool.ProxyPreparedStatement.executeUpdate(ProxyPreparedStatement.java:61)
 at com.zaxxer.hikari.pool.HikariProxyPreparedStatement.executeUpdate(HikariProxyPreparedStatement.java)
 at org.datanucleus.store.rdbms.SQLController.doExecuteStatementUpdate(SQLController.java:465)
 at org.datanucleus.store.rdbms.SQLController.executeStatementUpdateDeferRowCountCheckForBatching(SQLController.java:415)
 at org.datanucleus.store.rdbms.request.InsertRequest.execute(InsertRequest.java:532)
 at org.datanucleus.store.rdbms.RDBMSPersistenceHandler.insertObjectInTable(RDBMSPersistenceHandler.java:235)
 at org.datanucleus.store.rdbms.RDBMSPersistenceHandler.insertObject(RDBMSPersistenceHandler.java:211)
 at org.datanucleus.state.StateManagerImpl.internalMakePersistent(StateManagerImpl.java:4610)
 at org.datanucleus.state.StateManagerImpl.makePersistent(StateManagerImpl.java:4587)
 at org.datanucleus.ExecutionContextImpl.persistObjectInternal(ExecutionContextImpl.java:2077)
 at org.datanucleus.ExecutionContext.persistObjectInternal(ExecutionContext.java:320)
 at org.datanucleus.ExecutionContextImpl.persistObjectWork(ExecutionContextImpl.java:1925)
 at org.datanucleus.ExecutionContextImpl.persistObject(ExecutionContextImpl.java:1786)
 at org.datanucleus.api.jdo.JDOPersistenceManager.jdoMakePersistent(JDOPersistenceManager.java:697)
 at org.datanucleus.api.jdo.JDOPersistenceManager.makePersistent(JDOPersistenceManager.java:722)
 at alpine.persistence.AbstractAlpineQueryManager.lambda$persist$1(AbstractAlpineQueryManager.java:316)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at alpine.persistence.AbstractAlpineQueryManager.persist(AbstractAlpineQueryManager.java:316)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.createVulnerability(VulnerabilityQueryManager.java:82)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.lambda$synchronizeVulnerability$1(VulnerabilityQueryManager.java:167)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.synchronizeVulnerability(VulnerabilityQueryManager.java:163)
 at org.dependencytrack.persistence.QueryManager.synchronizeVulnerability(QueryManager.java:795)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.lambda$processAdvisory$2(GitHubAdvisoryMirrorTask.java:221)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.processAdvisory(GitHubAdvisoryMirrorTask.java:220)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.inform(GitHubAdvisoryMirrorTask.java:154)
 at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
 at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
 at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
 at java.base/java.lang.Thread.run(Unknown Source)
Caused by: java.net.SocketException: Connection reset
 at java.base/sun.nio.ch.NioSocketImpl.implRead(Unknown Source)
 at java.base/sun.nio.ch.NioSocketImpl.read(Unknown Source)
 at java.base/sun.nio.ch.NioSocketImpl$1.read(Unknown Source)
 at java.base/java.net.Socket$SocketInputStream.read(Unknown Source)
 at org.postgresql.core.VisibleBufferedInputStream.readMore(VisibleBufferedInputStream.java:192)
 at org.postgresql.core.VisibleBufferedInputStream.ensureBytes(VisibleBufferedInputStream.java:159)
 at org.postgresql.core.VisibleBufferedInputStream.ensureBytes(VisibleBufferedInputStream.java:144)
 at org.postgresql.core.VisibleBufferedInputStream.read(VisibleBufferedInputStream.java:76)
 at org.postgresql.core.PGStream.receiveChar(PGStream.java:477)
 at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2175)
 at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
 ... 41 common frames omitted
2026-04-08 05:46:31,545 ERROR [Persist] Insert of object "org.dependencytrack.model.Vulnerability@2c998e82" using statement "INSERT INTO "VULNERABILITY" ("CREATED","CREDITS","CVSSV2BASESCORE","CVSSV2EXPLOITSCORE","CVSSV2IMPACTSCORE","CVSSV2VECTOR","CVSSV3BASESCORE","CVSSV3EXPLOITSCORE","CVSSV3IMPACTSCORE","CVSSV3VECTOR","CWES","DESCRIPTION","DETAIL","EPSSPERCENTILE","EPSSSCORE","FRIENDLYVULNID","OWASPRRBUSINESSIMPACTSCORE","OWASPRRLIKELIHOODSCORE","OWASPRRTECHNICALIMPACTSCORE","OWASPRRVECTOR","PATCHEDVERSIONS","PUBLISHED","RECOMMENDATION","REFERENCES","SEVERITY","SOURCE","SUBTITLE","TITLE","UPDATED","UUID","VULNID","VULNERABLEVERSIONS") VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" failed : An I/O error occurred while sending to the backend. [vulnId=GHSA-24rp-q3w6-vc56]
2026-04-08 05:46:31,546 ERROR [Transaction] Operation rollback failed on resource: org.datanucleus.store.rdbms.ConnectionFactoryImpl$EmulatedXAResource@799d2a74, error code UNKNOWN and transaction [DataNucleus Transaction, ID=-1935739013-4492149, enlisted resources=[org.datanucleus.store.rdbms.ConnectionFactoryImpl$EmulatedXAResource@799d2a74]] : Connection is closed [vulnId=GHSA-24rp-q3w6-vc56]
2026-04-08 05:46:32,406 ERROR [GitHubAdvisoryMirrorTask] An unexpected error occurred after mirroring 42 GHSAs in PT7.210211688S (last committed modification timestamp: null)
javax.jdo.JDODataStoreException: Insert of object "org.dependencytrack.model.Vulnerability@2c998e82" using statement "INSERT INTO "VULNERABILITY" ("CREATED","CREDITS","CVSSV2BASESCORE","CVSSV2EXPLOITSCORE","CVSSV2IMPACTSCORE","CVSSV2VECTOR","CVSSV3BASESCORE","CVSSV3EXPLOITSCORE","CVSSV3IMPACTSCORE","CVSSV3VECTOR","CWES","DESCRIPTION","DETAIL","EPSSPERCENTILE","EPSSSCORE","FRIENDLYVULNID","OWASPRRBUSINESSIMPACTSCORE","OWASPRRLIKELIHOODSCORE","OWASPRRTECHNICALIMPACTSCORE","OWASPRRVECTOR","PATCHEDVERSIONS","PUBLISHED","RECOMMENDATION","REFERENCES","SEVERITY","SOURCE","SUBTITLE","TITLE","UPDATED","UUID","VULNID","VULNERABLEVERSIONS") VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" failed : An I/O error occurred while sending to the backend.
 at org.datanucleus.api.jdo.JDOAdapter.getJDOExceptionForNucleusException(JDOAdapter.java:608)
 at org.datanucleus.api.jdo.JDOPersistenceManager.jdoMakePersistent(JDOPersistenceManager.java:702)
 at org.datanucleus.api.jdo.JDOPersistenceManager.makePersistent(JDOPersistenceManager.java:722)
 at alpine.persistence.AbstractAlpineQueryManager.lambda$persist$1(AbstractAlpineQueryManager.java:316)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at alpine.persistence.AbstractAlpineQueryManager.persist(AbstractAlpineQueryManager.java:316)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.createVulnerability(VulnerabilityQueryManager.java:82)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.lambda$synchronizeVulnerability$1(VulnerabilityQueryManager.java:167)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at org.dependencytrack.persistence.VulnerabilityQueryManager.synchronizeVulnerability(VulnerabilityQueryManager.java:163)
 at org.dependencytrack.persistence.QueryManager.synchronizeVulnerability(QueryManager.java:795)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.lambda$processAdvisory$2(GitHubAdvisoryMirrorTask.java:221)
 at alpine.persistence.Transaction.call(Transaction.java:139)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:542)
 at alpine.persistence.AbstractAlpineQueryManager.callInTransaction(AbstractAlpineQueryManager.java:553)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.processAdvisory(GitHubAdvisoryMirrorTask.java:220)
 at org.dependencytrack.tasks.GitHubAdvisoryMirrorTask.inform(GitHubAdvisoryMirrorTask.java:154)
 at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
 at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
 at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
 at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.postgresql.util.PSQLException: An I/O error occurred while sending to the backend.
 at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:399)
 at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:525)
 at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:435)
 at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:196)
 at org.postgresql.jdbc.PgPreparedStatement.executeUpdate(PgPreparedStatement.java:157)
 at com.zaxxer.hikari.pool.ProxyPreparedStatement.executeUpdate(ProxyPreparedStatement.java:61)
 at com.zaxxer.hikari.pool.HikariProxyPreparedStatement.executeUpdate(HikariProxyPreparedStatement.java)
 at org.datanucleus.store.rdbms.SQLController.doExecuteStatementUpdate(SQLController.java:465)
 at org.datanucleus.store.rdbms.SQLController.executeStatementUpdateDeferRowCountCheckForBatching(SQLController.java:415)
 at org.datanucleus.store.rdbms.request.InsertRequest.execute(InsertRequest.java:532)
 at org.datanucleus.store.rdbms.RDBMSPersistenceHandler.insertObjectInTable(RDBMSPersistenceHandler.java:235)
 at org.datanucleus.store.rdbms.RDBMSPersistenceHandler.insertObject(RDBMSPersistenceHandler.java:211)
 at org.datanucleus.state.StateManagerImpl.internalMakePersistent(StateManagerImpl.java:4610)
 at org.datanucleus.state.StateManagerImpl.makePersistent(StateManagerImpl.java:4587)
 at org.datanucleus.ExecutionContextImpl.persistObjectInternal(ExecutionContextImpl.java:2077)
 at org.datanucleus.ExecutionContext.persistObjectInternal(ExecutionContext.java:320)
 at org.datanucleus.ExecutionContextImpl.persistObjectWork(ExecutionContextImpl.java:1925)
 at org.datanucleus.ExecutionContextImpl.persistObject(ExecutionContextImpl.java:1786)
 at org.datanucleus.api.jdo.JDOPersistenceManager.jdoMakePersistent(JDOPersistenceManager.java:697)
 ... 23 common frames omitted
Caused by: java.net.SocketException: Connection reset
 at java.base/sun.nio.ch.NioSocketImpl.implRead(Unknown Source)
 at java.base/sun.nio.ch.NioSocketImpl.read(Unknown Source)
 at java.base/sun.nio.ch.NioSocketImpl$1.read(Unknown Source)
 at java.base/java.net.Socket$SocketInputStream.read(Unknown Source)
 at org.postgresql.core.VisibleBufferedInputStream.readMore(VisibleBufferedInputStream.java:192)
 at org.postgresql.core.VisibleBufferedInputStream.ensureBytes(VisibleBufferedInputStream.java:159)
 at org.postgresql.core.VisibleBufferedInputStream.ensureBytes(VisibleBufferedInputStream.java:144)
 at org.postgresql.core.VisibleBufferedInputStream.read(VisibleBufferedInputStream.java:76)
 at org.postgresql.core.PGStream.receiveChar(PGStream.java:477)
 at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2175)
 at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
 ... 41 common frames omitted