admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-09 10:13:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
3,884 Commits 31 Branches 180 Tags
43d4e5597b8ea044f230ea05a5be954b669c8dad
Commit Graph

121 Commits

Author SHA1 Message Date
Teppei Fukuda
93915dc97a refactor: add xslices.Map and replace lo.Map usages (#9984) 2025-12-26 08:07:03 +00:00
Teppei Fukuda
56b59e8abb feat(php): add support for dev dependencies in Composer (#9910) 2025-12-09 12:40:05 +00:00
Owen Rumney
15a5465ad3 docs: catch some missed docs -> guide (#9850) 2025-11-27 10:57:12 +00:00
thekovic
738b2b474a fix: update all documentation links (#9777) 2025-11-13 05:43:20 +00:00
DmitriyLewen
d87d9b97d1 fix(java): use true as default value for Repository Release|Snapshot Enabled in pom.xml and settings.xml files (#9751) 2025-11-10 13:51:56 +00:00
Alex Lutz
18c0ee86f3 feat(dotnet): add dependency graph support for .deps.json files (#9726) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-11-01 05:54:46 +00:00
Teppei Fukuda
89fc7b65a5 refactor: add case-insensitive string set implementation (#9720) 2025-10-29 09:25:35 +00:00
DmitriyLewen
eff52eb2e6 feat(java): add support remote repositories from settings.xml files (#9708) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-10-28 08:35:19 +00:00
Derek H.J Ray
231492db52 fix(nodejs): fix npmjs parser.pkgNameFromPath() panic issue (#9688) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-10-23 10:06:54 +00:00
DmitriyLewen
b885d3a369 fix: use context for analyzers (#9538) 2025-10-14 05:13:48 +00:00
Raghu
e18b038ee2 fix: Trim the end-of-range suffix (#9618) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-10-13 06:15:37 +00:00
DmitriyLewen
e286c5e207 fix(java): update order for resolving package fields from multiple demManagement (#9575) 2025-10-06 07:46:19 +00:00
DmitriyLewen
404abb3d91 fix(nodejs): parse workspaces as objects for package-lock.json files (#9518) 2025-09-24 08:04:23 +00:00
Teppei Fukuda
788f6faffb refactor: migrate from go-json-experiment to encoding/json/v2 (#9422) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-15 08:46:44 +00:00
amitbhardwaj
4517e8c0ef fix(nodejs): use snapshot string as Package.ID for pnpm packages (#9330) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-09-04 04:52:26 +00:00
DmitriyLewen
1473e88b74 fix(python): impove package name normalization (#9290) 2025-08-01 08:04:31 +00:00
Teppei Fukuda
d2d0ec2b6d chore: add modernize tool integration for code modernization (#9251) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-07-29 07:13:54 +00:00
Teppei Fukuda
8f5b56005a chore: implement process-safe temp file cleanup (#9241) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-07-28 13:49:03 +00:00
Teppei Fukuda
3adfd988d1 refactor: centralize HTTP transport configuration (#9058) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2025-06-24 17:43:58 +00:00
kennyk
5aade698c7 feat(java): dereference all maven settings.xml env placeholders (#9024) 2025-06-20 11:39:23 +00:00
DmitriyLewen
875ec3a9d2 fix(nodejs): correctly parse packages array of bun.lock file (#8998) 2025-06-09 11:52:30 +00:00
Nikita Pivkin
454b894098 refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-06-09 10:01:53 +00:00
Ashwani Kumar Kamal
1dcf81666f feat(nodejs): add bun.lock parser (#8851) 
Signed-off-by: Ashwani Kumar Kamal (sneaky-potato) <ashwanikamal.im421@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-05-20 14:00:47 +00:00
Sandro
be8c7b796d fix: julia parser panicing (#8883) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-05-19 09:47:44 +00:00
Matthieu MOREL
3b1426a676 chore: enable staticcheck (#8815) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-05-07 06:15:35 +00:00
Ashwani Kumar Kamal
8995838e8d fix(java): exclude dev dependencies in gradle lockfile (#8803) 2025-05-05 14:00:15 +00:00
Matthieu MOREL
3ab459e3b6 fix: more revive rules (#8814) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-05-05 05:50:37 +00:00
Matthieu MOREL
6562082e28 fix: unused-parameter rule from revive (#8794) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-04-30 09:17:24 +00:00
Matthieu MOREL
43350dd9b4 fix: early-return, indent-error-flow and superfluous-else rules from revive (#8796) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-04-30 06:24:09 +00:00
DmitriyLewen
4b84dabd15 refactor: migrate from github.com/aquasecurity/jfather to github.com/go-json-experiment/json (#8591) 2025-04-09 12:22:57 +00:00
Tom Fay
3840d90f85 chore(deps): update go-rustaudit location (#8450) 
Signed-off-by: Tom Fay <tom@teamfay.co.uk>
 2025-02-27 03:03:33 +00:00
Itay Shakury
49456ba841 fix: update all documentation links (#8045) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-02-26 10:41:46 +00:00
Maksim Nabokikh
e58dcfcf9f feat(go): fix parsing main module version for go >= 1.24 (#8433) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-02-24 11:22:13 +00:00
DmitriyLewen
b675b06e89 fix(go): merge nested flags into string for ldflags for Go binaries (#8368) 2025-02-13 08:16:14 +00:00
DmitriyLewen
10cd98cf55 fix(python): add poetry v2 support (#8323) 
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
 2025-02-03 08:22:12 +00:00
Matthieu MOREL
715575d731 chore: use require.ErrorContains when possible (#8291) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-01-27 06:47:29 +00:00
DmitriyLewen
cc66d6d00f chore(deps): use aqua forks for github.com/liamg/jfather and github.com/liamg/iamgo (#8289) 2025-01-24 09:07:45 +00:00
DmitriyLewen
4f111b9342 refactor(python): use once + debug for License acquired from METADATA... logs (#8175) 2024-12-25 06:17:08 +00:00
Nikita Pivkin
49c54b49c6 feat(python): add support for uv dev and optional dependencies (#8134) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-24 13:43:28 +00:00
Teppei Fukuda
b5859d3fb5 refactor: add generic Set implementation (#8149) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-12-24 04:47:21 +00:00
Nikita Pivkin
a034d26443 fix(python): skip dev group's deps for poetry (#8106) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-23 06:20:15 +00:00
Nikita Pivkin
c4a4a5fa97 feat(python): add support for uv (#8080) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-19 05:59:30 +00:00
DmitriyLewen
9d9f80d979 fix(java): correctly overwrite version from depManagement if dependency uses project.* props (#8050) 2024-12-05 07:57:31 +00:00
Teppei Fukuda
73899610e8 feat(nodejs): respect peer dependencies for dependency tree (#7989) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-12-05 07:57:12 +00:00
DmitriyLewen
d622ca2b1f feat: add workspaceRelationship (#7889) 2024-11-29 04:49:41 +00:00
DmitriyLewen
5448ba2a5c feat(go): construct dependencies of go.mod main module in the parser (#7977) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-11-22 12:06:33 +00:00
Teppei Fukuda
bcdc0bbf1f feat(go): construct dependencies in the parser (#7973) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-11-21 11:05:16 +00:00
Rutam Prita Mishra
e872ec006c fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-10-31 06:03:22 +00:00
Matthieu MOREL
57e24aa853 fix: enable usestdlibvars linter (#7770) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-10-21 09:06:50 +00:00
Samuel Gaist
a7baa93b00 feat(parser): ignore white space in pom.xml files (#7747) 
Signed-off-by: Samuel Gaist <samuel.gaist@idiap.ch>
 2024-10-17 09:35:09 +00:00