admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-07 09:13:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deployed f18d035ae to dev with MkDocs 1.3.0 and mike 1.1.2

Browse Source
This commit is contained in:
knqyf263
2024-06-19 09:10:22 +00:00
parent f717e87d46
commit c2a29576dc
7 changed files with 50 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
dev/docs/coverage/language/java/index.html
View File

@@ -1982,6 +1982,13 @@ You're not viewing the latest version.
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#sbt" class="md-nav__link">
SBT
</a>
</li>
</ul>
@@ -3982,6 +3989,13 @@ You're not viewing the latest version.
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#sbt" class="md-nav__link">
SBT
</a>
</li>
</ul>
@@ -4003,7 +4017,7 @@ You're not viewing the latest version.
<h1 id="java">Java</h1>
<p>Trivy supports three types of Java scanning: <code>JAR/WAR/PAR/EAR</code>, <code>pom.xml</code> and <code>*gradle.lockfile</code> files.</p>
<p>Trivy supports four types of Java scanning: <code>JAR/WAR/PAR/EAR</code>, <code>pom.xml</code>, <code>*gradle.lockfile</code> and <code>*.sbt.lock</code> files.</p>
<p>Each artifact supports the following scanners:</p>
<table>
<thead>
@@ -4033,6 +4047,12 @@ You're not viewing the latest version.
<td align="center">✓</td>
<td align="center">✓</td>
</tr>
<tr>
<td>*.sbt.lock</td>
<td align="center">✓</td>
<td align="center">✓</td>
<td align="center">-</td>
</tr>
</tbody>
</table>
<p>The following table provides an outline of the features Trivy offers.</p>
@@ -4068,6 +4088,13 @@ You're not viewing the latest version.
<td align="center">✓</td>
<td align="center">✓</td>
</tr>
<tr>
<td>*.sbt.lock</td>
<td align="center">-</td>
<td align="center">Exclude</td>
<td align="center">-</td>
<td align="center">✓</td>
</tr>
</tbody>
</table>
<p>These may be enabled or disabled depending on the target.
@@ -4142,6 +4169,13 @@ Therefore, we mark all dependencies as indirect to use logic to guess direct dep
<h3 id="licenses">Licenses</h3>
<p>Trity also can detect licenses for dependencies.</p>
<p>Make sure that you have cache<sup id="fnref2:8"><a class="footnote-ref" href="#fn:8">8</a></sup> directory to find licenses from <code>*.pom</code> dependency files.</p>
<h2 id="sbt">SBT</h2>
<p><code>build.sbt.lock</code> files only contain information about used dependencies. This requires a lockfile generated using the
<a href="https://stringbean.github.io/sbt-dependency-lock">sbt-dependency-lock</a> plugin.</p>
<div class="admonition note">
<p class="admonition-title">Note</p>
<p>All necessary files are checked locally. SBT file scanning doesn't require internet access.</p>
</div>
<div class="footnote">
<hr />
<ol>