admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-10 10:43:18 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deployed 49c54b49c to dev with MkDocs 1.6.1 and mike 2.1.3

Browse Source
This commit is contained in:
knqyf263
2024-12-24 14:05:45 +00:00
parent 742afc9101
commit 794f1282f1
7 changed files with 25 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
dev/docs/coverage/language/python/index.html
View File

@@ -8061,7 +8061,7 @@ The following scanners are supported for Python packages.</p>
<td>uv</td>
<td>uv.lock</td>
<td style="text-align: center;">✓</td>
<td style="text-align: center;">Exclude</td>
<td style="text-align: center;"><a href="#uv">Exclude</a></td>
<td style="text-align: center;">✓</td>
<td style="text-align: center;">-</td>
<td style="text-align: center;">Not needed</td>
@@ -8162,6 +8162,7 @@ To build the correct dependency graph, <code>pyproject.toml</code> also needs to
<h3 id="uv">uv<a class="headerlink" href="#uv" title="Permanent link">&para;</a></h3>
<p>Trivy uses <code>uv.lock</code> to identify dependencies and find vulnerabilities.</p>
<p>License detection is not supported for <code>uv</code>.</p>
<p>By default, Trivy doesn't report development dependencies. Use the <code>--include-dev-deps</code> flag to include them.</p>
<h2 id="packaging">Packaging<a class="headerlink" href="#packaging" title="Permanent link">&para;</a></h2>
<p>Trivy parses the manifest files of installed packages in container image scanning and so on.
See <a href="https://packaging.python.org/en/latest/discussions/package-formats/">here</a> for the detail.</p>