admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-01-31 13:53:14 +08:00
Code Issues Packages Projects Releases Wiki Activity
3,928 Commits 28 Branches 179 Tags
ba9feb66bf8f8292e0f9f936b0f01e244859c06e
Commit Graph

1848 Commits

Author SHA1 Message Date
Nikita Pivkin
ba9feb66bf chore: bump trivy-checks to v2 (#9875) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-30 08:02:58 +00:00
Riolku
036c05b9a1 fix(repo): return a nil interface for gitAuth if missing (#10097) 2026-01-30 06:53:14 +00:00
DmitriyLewen
2933b01cd5 fix(java): correctly inherit properties from parent fields for pom.xml files (#9111) 2026-01-30 06:34:59 +00:00
Czékus Máté
47d3103c50 fix(rust): implement version inheritance for Cargo mono repos (#10011) 
Signed-off-by: Máté Czékus <mate@picloud.hu>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2026-01-29 10:51:02 +00:00
DmitriyLewen
676709de44 feat(activestate): add support ActiveState images (#10081) 2026-01-29 06:42:32 +00:00
Alessio Greggi
f809066b07 feat(vex): support per-repo tls configuration (#10030) 
Signed-off-by: Alessio Greggi <alessio.greggi@suse.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2026-01-24 03:59:56 +00:00
Teppei Fukuda
f97ac7e112 refactor: allow per-request transport options override (#10083) 2026-01-23 10:23:33 +00:00
DmitriyLewen
b9415a309c fix(java): correctly propagate repositories from upper POMs to dependencies (#10077) 2026-01-22 08:15:38 +00:00
Teppei Fukuda
31c4780f72 feat(rocky): enable modular package vulnerability detection (#10069) 2026-01-22 06:21:21 +00:00
Teppei Fukuda
fe7d20a31c feat(report): add Trivy version to JSON output (#10065) 2026-01-20 09:36:33 +00:00
Czékus Máté
d2dc46ad60 fix(rust): add cargo workspace members glob support (#10032) 
Signed-off-by: Máté Czékus <mate@picloud.hu>
 2026-01-20 06:27:38 +00:00
Teppei Fukuda
195382400f feat: add AnalyzedBy field to track which analyzer detected packages (#10059) 2026-01-19 13:17:32 +00:00
DmitriyLewen
c233735b02 fix: use canonical SPDX license IDs from embeded licenses.json (#10053) 2026-01-19 09:31:30 +00:00
Murat Aslan
34baef28ec feat(secret): add detection for Symfony default secret key (#9892) 
Co-authored-by: Murat Aslan <murataslan1@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2026-01-16 09:53:18 +00:00
Nikita Pivkin
56029517d6 refactor(misconf): move common logic to base value and simplify typed values (#9986) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-16 05:03:13 +00:00
DmitriyLewen
809db46231 fix(java): add hash of GAV+root pom file path for pkgID for packages from pom.xml files (#9880) 
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2026-01-15 07:31:21 +00:00
Nikita Pivkin
5fced3ae49 feat(misconf): use Terraform plan configuration to partially restore schema (#9623) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:47:56 +00:00
Nikita Pivkin
b06ef6d270 feat(misconf): add action block to Terraform schema (#10035) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:45:48 +00:00
Nikita Pivkin
ac061f8e88 fix(misconf): correct typos in block and attribute names (#9993) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:45:31 +00:00
Nikita Pivkin
8c23bfd871 test(misconf): simplify test values using *Test helpers (#9985) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:44:33 +00:00
Nikita Pivkin
a0ecc8e926 fix(misconf): safely parse rotation_period in google_kms_crypto_key (#9980) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:44:08 +00:00
Nikita Pivkin
92d3465cee feat(misconf): support for ARM resources defined as an object (#9959) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:43:44 +00:00
Nikita Pivkin
37b5da895b feat(misconf): support for azurerm_*_web_app (#9944) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-14 19:43:04 +00:00
DmitriyLewen
51f5412ba7 test: migrate private test helpers to export_test.go convention (#10043) 2026-01-14 09:32:42 +00:00
DmitriyLewen
cdb28eeeb1 fix(secret): improve word boundary detection for Hugging Face tokens (#10046) 2026-01-14 07:32:29 +00:00
DmitriyLewen
3c0ab97e10 fix(go): use ldflags version for all pseudo-versions (#10037) 2026-01-13 10:45:18 +00:00
Nikita Pivkin
f0e23ead66 chore: switch to ID from AVDID in internal and user-facing fields (#9655) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-13 07:58:01 +00:00
Nikita Pivkin
6462dc8a58 refactor(misconf)!: use ID instead of AVDID for providers mapping (#9752) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2026-01-13 07:57:18 +00:00
Teppei Fukuda
07ff7885df feat(sbom): exclude PEP 770 SBOMs in .dist-info/sboms/ (#10033) 2026-01-12 11:08:05 +00:00
Andre Oganesian
7f71b577a0 fix(docker): fix non-det scan results for images with embedded SBOM (#9866) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2026-01-12 10:10:07 +00:00
Christian Dupuis
08a3f92ab6 test: fix assertion after 2026 roll over (#10002) 2026-01-05 06:51:30 +00:00
amitbhardwaj
b46cde0ebe fix(vuln): skip vulns detection for CentOS Stream family without scan failure (#9964) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-12-29 07:27:06 +00:00
DmitriyLewen
11dd3fac38 fix(license): normalize licenses for PostAnalyzers (#9941) 2025-12-29 06:27:04 +00:00
DmitriyLewen
b64d5adc6b feat(nodejs): parse licenses from package-lock.json file (#9983) 2025-12-29 05:57:06 +00:00
Teppei Fukuda
93915dc97a refactor: add xslices.Map and replace lo.Map usages (#9984) 2025-12-26 08:07:03 +00:00
Pierre Guilleminot
18acf4f71d fix(image): race condition in image artifact inspection (#9966) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-12-25 05:53:23 +00:00
Teppei Fukuda
4caf7312b6 feat(flag): add JSON Schema for trivy.yaml configuration file (#9971) 2025-12-23 09:05:17 +00:00
Teppei Fukuda
517365caa3 refactor(debian): use txtar format for test data (#9957) 2025-12-23 06:55:13 +00:00
urimils
d3096e7617 feat(rootio): Update trivy db to support usage of Severity from root.io feed (#9930) 
Co-authored-by: urimils <urimils@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-12-22 11:45:49 +00:00
Teppei Fukuda
74819bf457 feat(vuln): skip vulnerability scanning for third-party packages in Debian/Ubuntu (#9932) 2025-12-22 10:56:30 +00:00
Ankit Pramanik
10a50a7429 perf(misconf): optimize string concatenation in azure scanner (#9969) 2025-12-22 05:37:36 +00:00
DmitriyLewen
f50b96a815 chore(alpine): add EOL date for alpine 3.23 (#9934) 2025-12-12 06:55:09 +00:00
Nikita Pivkin
d65b504cb2 feat(cloudformation): add support for Fn::ForEach (#9508) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-12-11 18:53:03 +00:00
Teppei Fukuda
effc1c0d4d feat(debian): detect third-party packages using maintainer list (#9917) 2025-12-11 05:18:31 +00:00
Nikita Pivkin
18ecf75176 fix(misconf): respect .yml files when Helm charts are detected (#9912) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-12-09 23:07:39 +00:00
Teppei Fukuda
56b59e8abb feat(php): add support for dev dependencies in Composer (#9910) 2025-12-09 12:40:05 +00:00
Matt Bauman
c2f82add3a feat(julia): enable vulnerability scanning for the Julia language ecosystem (#9800) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-12-05 10:15:16 +00:00
Nikita Pivkin
9275e1532b feat(misconf): initial ansible scanning support (#9332) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: Simar <simar@linux.com>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
 2025-12-05 06:20:37 +00:00
yagreut
48dfedeb1e feat(misconf): Update Azure Database schema (#9811) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-12-05 05:28:25 +00:00
fischaz
e74e2b1b0a feat(aws): Add support for dualstack ECR endpoints (#9862) 2025-12-02 06:17:16 +00:00