admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-05 08:13:11 +08:00
Code Issues Packages Projects Releases Wiki Activity
3,555 Commits 29 Branches 179 Tags
5d050ce274dba7679c6aeeefc6134d88975b0fc5
Commit Graph

99 Commits

Author SHA1 Message Date
Ashwani Kumar Kamal
1dcf81666f feat(nodejs): add bun.lock parser (#8851) 
Signed-off-by: Ashwani Kumar Kamal (sneaky-potato) <ashwanikamal.im421@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-05-20 14:00:47 +00:00
Sandro
be8c7b796d fix: julia parser panicing (#8883) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-05-19 09:47:44 +00:00
Matthieu MOREL
3b1426a676 chore: enable staticcheck (#8815) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-05-07 06:15:35 +00:00
Ashwani Kumar Kamal
8995838e8d fix(java): exclude dev dependencies in gradle lockfile (#8803) 2025-05-05 14:00:15 +00:00
Matthieu MOREL
3ab459e3b6 fix: more revive rules (#8814) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-05-05 05:50:37 +00:00
Matthieu MOREL
6562082e28 fix: unused-parameter rule from revive (#8794) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-04-30 09:17:24 +00:00
Matthieu MOREL
43350dd9b4 fix: early-return, indent-error-flow and superfluous-else rules from revive (#8796) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-04-30 06:24:09 +00:00
DmitriyLewen
4b84dabd15 refactor: migrate from github.com/aquasecurity/jfather to github.com/go-json-experiment/json (#8591) 2025-04-09 12:22:57 +00:00
Tom Fay
3840d90f85 chore(deps): update go-rustaudit location (#8450) 
Signed-off-by: Tom Fay <tom@teamfay.co.uk>
 2025-02-27 03:03:33 +00:00
Itay Shakury
49456ba841 fix: update all documentation links (#8045) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-02-26 10:41:46 +00:00
Maksim Nabokikh
e58dcfcf9f feat(go): fix parsing main module version for go >= 1.24 (#8433) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-02-24 11:22:13 +00:00
DmitriyLewen
b675b06e89 fix(go): merge nested flags into string for ldflags for Go binaries (#8368) 2025-02-13 08:16:14 +00:00
DmitriyLewen
10cd98cf55 fix(python): add poetry v2 support (#8323) 
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
 2025-02-03 08:22:12 +00:00
Matthieu MOREL
715575d731 chore: use require.ErrorContains when possible (#8291) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-01-27 06:47:29 +00:00
DmitriyLewen
cc66d6d00f chore(deps): use aqua forks for github.com/liamg/jfather and github.com/liamg/iamgo (#8289) 2025-01-24 09:07:45 +00:00
DmitriyLewen
4f111b9342 refactor(python): use once + debug for License acquired from METADATA... logs (#8175) 2024-12-25 06:17:08 +00:00
Nikita Pivkin
49c54b49c6 feat(python): add support for uv dev and optional dependencies (#8134) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-24 13:43:28 +00:00
Teppei Fukuda
b5859d3fb5 refactor: add generic Set implementation (#8149) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-12-24 04:47:21 +00:00
Nikita Pivkin
a034d26443 fix(python): skip dev group's deps for poetry (#8106) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-23 06:20:15 +00:00
Nikita Pivkin
c4a4a5fa97 feat(python): add support for uv (#8080) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2024-12-19 05:59:30 +00:00
DmitriyLewen
9d9f80d979 fix(java): correctly overwrite version from depManagement if dependency uses project.* props (#8050) 2024-12-05 07:57:31 +00:00
Teppei Fukuda
73899610e8 feat(nodejs): respect peer dependencies for dependency tree (#7989) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-12-05 07:57:12 +00:00
DmitriyLewen
d622ca2b1f feat: add workspaceRelationship (#7889) 2024-11-29 04:49:41 +00:00
DmitriyLewen
5448ba2a5c feat(go): construct dependencies of go.mod main module in the parser (#7977) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-11-22 12:06:33 +00:00
Teppei Fukuda
bcdc0bbf1f feat(go): construct dependencies in the parser (#7973) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-11-21 11:05:16 +00:00
Rutam Prita Mishra
e872ec006c fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-10-31 06:03:22 +00:00
Matthieu MOREL
57e24aa853 fix: enable usestdlibvars linter (#7770) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-10-21 09:06:50 +00:00
Samuel Gaist
a7baa93b00 feat(parser): ignore white space in pom.xml files (#7747) 
Signed-off-by: Samuel Gaist <samuel.gaist@idiap.ch>
 2024-10-17 09:35:09 +00:00
DmitriyLewen
778df828ea fix(java): correctly inherit version and scope from upper/root depManagement and dependencies into parents (#7541) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-10-17 06:54:12 +00:00
DmitriyLewen
b8362321ad feat(java): add empty versions if pom.xml dependency versions can't be detected (#7520) 
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2024-09-30 14:47:51 +00:00
DmitriyLewen
54429497e7 fix(java): use dependencyManagement from root/child pom's for dependencies from parents (#7497) 2024-09-16 11:14:28 +00:00
DmitriyLewen
b0222feeb5 revert(java): stop supporting of test scope for pom.xml files (#7488) 2024-09-12 05:10:13 +00:00
DmitriyLewen
412fb764f0 refactor(java): add error/statusCode for logs when we can't get pom.xml/maven-metadata.xml from remote repo (#7451) 2024-09-06 06:55:51 +00:00
afdesk
4926da79de fix(license): stop spliting a long license text (#7336) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-09-05 10:20:29 +00:00
DmitriyLewen
2d80769c34 feat(go): use toolchain as stdlib version for go.mod files (#7163) 2024-09-03 08:42:41 +00:00
DmitriyLewen
2d97700d10 feat(java): add test scope support for pom.xml files (#7414) 2024-09-03 08:28:49 +00:00
DmitriyLewen
fd9ed3a330 fix(nodejs): check all importers to detect dev deps from pnpm-lock.yaml file (#7387) 2024-09-02 07:19:01 +00:00
afdesk
e9b43f81e6 feat(python): use minimum version for pip packages (#7348) 2024-08-24 03:23:29 +00:00
Teppei Fukuda
fd8348d610 feat(vuln): Add --detection-priority flag for accuracy tuning (#7288) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-08-02 10:41:56 +00:00
Colm O hEigeartaigh
49d5270163 fix(java): Return error when trying to find a remote pom to avoid segfault (#7275) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-07-31 12:07:33 +00:00
DmitriyLewen
54bb8bdfb9 fix(nodejs): detect direct dependencies when using latest version for files yarn.lock + package.json (#7110) 2024-07-30 06:31:39 +00:00
DmitriyLewen
5bc662be9a fix(dotnet): don't include non-runtime libraries into report for *.deps.json files (#7039) 2024-07-22 03:44:44 +00:00
Colm O hEigeartaigh
dc68a662a7 fix: Add dependencyManagement exclusions to the child exclusions (#6969) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-07-09 03:43:08 +00:00
DmitriyLewen
a7a304d53e fix(java): use go-mvn-version to remove Package duplicates (#7088) 
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2024-07-04 09:52:23 +00:00
DmitriyLewen
1f5f348958 feat: add log.FilePath() function for logger (#7080) 2024-07-02 09:48:20 +00:00
DmitriyLewen
654217a654 feat(conda): add licenses support for environment.yml files (#6953) 
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2024-07-01 07:21:38 +00:00
Teppei Fukuda
983ac15f22 ci: add depguard (#6963) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-06-20 02:48:08 +00:00
Michael Stringer
f18d035ae1 feat(java): add support for sbt projects using sbt-dependency-lock (#6882) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-06-19 08:46:22 +00:00
DmitriyLewen
1f8fca1fc7 feat(java): add support for maven-metadata.xml files for remote snapshot repositories. (#6950) 2024-06-19 07:47:42 +00:00
DmitriyLewen
52f7aa54b5 fix(license): return license separation using separators ,, or, etc. (#6916) 2024-06-14 07:36:47 +00:00