Basic setup for Gitlab CI does not work

[greenozon]

Description

I'd like to add trivy into my Gitlab CI pipeline, but looks like I"m missing some very basic setup...

Desired Behavior

trivy runs successfully inside Gitlab CI job

Actual Behavior

it reports a strange error:

Running with gitlab-runner 16.11.0~pre.21.gaa21be2d (aa21be2d)
  on blue-4.saas-linux-small-amd64.runners-manager.gitlab.com/default J2nyww-s, system ID: s_cf1798852952
  feature flags: FF_USE_IMPROVED_URL_MASKING:true
Resolving secrets
00:00
Preparing the "docker+machine" executor
00:08
Using Docker executor with image aquasec/trivy:latest-amd64 ...
Pulling docker image aquasec/trivy:latest-amd64 ...
Using docker image sha256:00d2b48cc9cfefa02497c2c42052d1572abb564100dd5817f9bc25d4fefcaf19 for aquasec/trivy:latest-amd64 with digest aquasec/trivy@sha256:4a092a85eb6b779060e384811a1bf22e71b099b42c85a880f1421ba2c8384533 ...
Preparing environment
00:02
Running on runner-j2nyww-s-project-38090699-concurrent-0 via runner-j2nyww-s-s-l-s-amd64-1714210233-0161f00e...
Getting source from Git repository
00:02
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/test1/infrastructure/backups/.git/
Created fresh repository.
Checking out 5e15c144 as detached HEAD (ref is main)...
Skipping Git submodules setup
$ git remote set-url origin "${CI_REPOSITORY_URL}"
Executing "step_script" stage of the job script
00:01
Using docker image sha256:00d2b48cc9cfefa02497c2c42052d1572abb564100dd5817f9bc25d4fefcaf19 for aquasec/trivy:latest-amd64 with digest aquasec/trivy@sha256:4a092a85eb6b779060e384811a1bf22e71b099b42c85a880f1421ba2c8384533 ...
Error: unknown command "sh" for "trivy"
Usage:
  trivy [global flags] command [flags] target
  trivy [command]
Examples:

Reproduction Steps

1. Prepare simple ci yaml file
2. add it into your GL repo
3. push any change and trigger the CI job


trivy:
  stage: test
  allow_failure: true
  image:
    name: aquasec/trivy:latest
  script:
    - trivy version
    - trivy fs .

### Target

Git Repository

### Scanner

Misconfiguration

### Output Format

None

### Mode

Standalone

### Debug Output

```bash
N/A as I'm not able to run trivy in GL CI job

Operating System

Alpine

Version

Version: 0.50.4

Checklist

• Run trivy image --reset
• Read the troubleshooting

[greenozon]

Update: issue fixed,
figured out that one need to add empty entrypoint to docker image
[""]