Commit Graph

  • 263aee07a3 test: update golden files for TestRepository* integration tests (#9684) Nikita Pivkin 2025-10-21 01:12:08 +06:00
  • ff8e9faf82 Deployed 559fe1fa2 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-20 16:18:03 +00:00
  • 559fe1fa2c refactor(cli): Update the cloud config command (#9676) Owen Rumney 2025-10-20 16:57:08 +01:00
  • 2c43425e05 fix(sbom): add buildInfo info as properties (#9683) DmitriyLewen 2025-10-20 12:00:39 +06:00
  • fc976bea48 feat: add ReportID field to scan reports (#9670) Teppei Fukuda 2025-10-17 14:31:22 +04:00
  • 0beab734df Deployed fcd8dcdd1 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-16 05:32:06 +00:00
  • fcd8dcdd1d docs: add vulnerability database contribution guide (#9667) Teppei Fukuda 2025-10-16 09:11:03 +04:00
  • 122a11190b Deployed 8e6a7ff67 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-15 10:56:23 +00:00
  • 8e6a7ff670 feat(cli): Add trivy cloud suppport (#9637) Owen Rumney 2025-10-15 11:34:39 +01:00
  • 84a7d9a5d6 feat: add ArtifactID field to uniquely identify scan targets (#9663) Teppei Fukuda 2025-10-15 11:04:41 +04:00
  • 804ea4aa57 fix(nodejs): use the default ID format to match licenses in pnpm packages. (#9661) DmitriyLewen 2025-10-14 17:16:01 +06:00
  • 35db88c81c feat(sbom): use SPDX license IDs list to validate SPDX IDs (#9569) DmitriyLewen 2025-10-14 12:58:55 +06:00
  • b885d3a369 fix: use context for analyzers (#9538) DmitriyLewen 2025-10-14 11:13:48 +06:00
  • 84518dbb7f chore(deps): bump the docker group with 3 updates (#9545) dependabot[bot] 2025-10-14 09:12:43 +04:00
  • fd92773ed8 chore(deps): bump the aws group with 6 updates (#9547) dependabot[bot] 2025-10-14 09:11:40 +04:00
  • ce8d47e927 ci(helm): bump Trivy version to 0.67.2 for Trivy Helm Chart 0.19.1 (#9641) Aqua Security automated builds 2025-10-13 16:00:38 +03:00
  • 4e1e6fca3a test(helm): bump up Yamale dependency for Helm chart-testing-action (#9653) afdesk 2025-10-13 18:20:38 +06:00
  • e18b038ee2 fix: Trim the end-of-range suffix (#9618) Raghu 2025-10-13 11:45:37 +05:30
  • 0e97a39d37 Deployed 60c57ad5a to v0.67 with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-10 13:14:03 +00:00
  • 60c57ad5ad release: v0.67.2 [release/v0.67] (#9639) v0.67.2 release/v0.67 Aqua Security automated builds 2025-10-10 15:53:16 +03:00
  • f3ee80c8e0 fix: Use fetch-level: 1 to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638) DmitriyLewen 2025-10-10 18:30:14 +06:00
  • 492797b1c7 test(k8s): use a specific bundle for k8s misconfig scan (#9633) afdesk 2025-10-10 16:49:25 +06:00
  • 6e53686526 fix: Use fetch-level: 1 to check out trivy-repo in the release workflow (#9636) DmitriyLewen 2025-10-10 16:27:12 +06:00
  • 63c4bb7886 Deployed cbed239f3 to v0.67 with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-09 11:15:52 +00:00
  • cbed239f39 release: v0.67.1 [release/v0.67] (#9614) v0.67.1 Aqua Security automated builds 2025-10-09 13:55:07 +03:00
  • 1a840935bb fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631) Aqua Security automated builds 2025-10-09 13:32:28 +03:00
  • 2f695b9bd4 refactor: move the aws config (#9617) Owen Rumney 2025-10-09 09:10:32 +01:00
  • 3bc1490c8c fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629) Aqua Security automated builds 2025-10-09 10:59:51 +03:00
  • 09162e52ec fix(license): don't normalize unlicensed licenses into unlicense (#9611) DmitriyLewen 2025-10-09 13:51:59 +06:00
  • 66479f050d fix: using SrcVersion instead of Version for echo detector (#9552) Ori 2025-10-09 10:12:43 +03:00
  • cff91acdef feat(fs): change artifact type to repository when git info is detected (#9613) Teppei Fukuda 2025-10-08 18:08:53 +04:00
  • 542eee7c38 fix: add buildInfo for BlobInfo in rpc package [backport: release/v0.67] (#9615) Aqua Security automated builds 2025-10-08 15:22:15 +03:00
  • f65dd05309 fix(vex): don't use reused BOM [backport: release/v0.67] (#9612) Aqua Security automated builds 2025-10-08 13:58:02 +03:00
  • 6def66e002 fix: add buildInfo for BlobInfo in rpc package (#9608) DmitriyLewen 2025-10-08 15:47:12 +06:00
  • 7422cc7168 fix(vex): don't use reused BOM (#9604) DmitriyLewen 2025-10-08 15:45:43 +06:00
  • b9e3e0b5f9 ci: use pull_request_target for apidiff workflow to support fork PRs (#9605) Teppei Fukuda 2025-10-07 16:38:49 +04:00
  • aeeb2a1f84 fix: restore compatibility for google.protobuf.Value (#9559) Teppei Fukuda 2025-10-07 16:19:15 +04:00
  • d7aa84f015 ci: add API diff workflow (#9600) Teppei Fukuda 2025-10-07 13:51:29 +04:00
  • 05375d17f7 chore(deps): update to module-compatible docker-credential-gcr/v2 (#9591) Mikel Olasagasti Uranga 2025-10-07 08:53:27 +02:00
  • 4e03086ad2 Deployed 36712514c to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-07 05:17:46 +00:00
  • 36712514ce docs: improve documentation for scanning raw IaC configurations (#9571) Nikita Pivkin 2025-10-07 10:52:26 +06:00
  • e6254f4e58 Deployed 4bef18348 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-10-06 18:36:12 +00:00
  • c638fc646c feat: allow ignoring findings by type in Rego (#9578) Nikita Pivkin 2025-10-07 00:17:23 +06:00
  • 4bef183489 docs: bump pygments from 2.18.0 to 2.19.2 (#9596) Nikita Pivkin 2025-10-07 00:15:49 +06:00
  • 19615a8462 refactor(misconf): add ID to scan.Rule (#9573) Nikita Pivkin 2025-10-06 14:33:06 +06:00
  • e286c5e207 fix(java): update order for resolving package fields from multiple demManagement (#9575) DmitriyLewen 2025-10-06 13:46:19 +06:00
  • 3962ea461a chore(deps): bump the github-actions group across 1 directory with 9 updates (#9563) dependabot[bot] 2025-10-06 09:44:45 +04:00
  • 36ab331c7f chore(deps): bump the common group across 1 directory with 7 updates (#9590) dependabot[bot] 2025-10-06 08:57:00 +04:00
  • 9058d51cb9 chore(deps): Switch to go-viper/mapstructure (#9579) Mikel Olasagasti Uranga 2025-10-06 05:25:21 +02:00
  • 719ea29d31 chore: add context to the cache interface (#9565) Owen Rumney 2025-10-03 10:37:05 +01:00
  • 3dd0ebbb56 ci(helm): bump Trivy version to 0.67.0 for Trivy Helm Chart 0.19.0 (#9554) Aqua Security automated builds 2025-09-30 16:41:16 +03:00
  • d72471beae Deployed adeb36242 to v0.67 with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-30 07:38:43 +00:00
  • f0fd432a7a fix: validate backport branch name (#9548) Teppei Fukuda 2025-09-30 11:26:35 +04:00
  • adeb362424 release: v0.67.0 [main] (#9432) v0.67.0 Aqua Security automated builds 2025-09-30 10:19:04 +03:00
  • 78f0d4ae03 fix(vex): don't suppress vulns for packages with infinity loop (#9465) DmitriyLewen 2025-09-30 12:41:10 +06:00
  • fa6f1bfecf fix(aws): use BuildableClient insead of xhttp.Client (#9436) DmitriyLewen 2025-09-30 11:54:12 +06:00
  • e7c16a756c refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282) Nikita Pivkin 2025-09-30 09:33:52 +06:00
  • ffc21cf06d Deployed c446a5c1c to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-30 02:18:32 +00:00
  • c446a5c1c7 docs: clarify inline ignore limitations for resource-less checks (#9537) Nikita Pivkin 2025-09-30 07:56:24 +06:00
  • c0c7a6bf1b fix(k8s): disable parallel traversal with fs cache for k8s images (#9534) afdesk 2025-09-30 07:44:51 +06:00
  • bfd2f6ba69 fix(misconf): handle tofu files in module detection (#9486) Nikita Pivkin 2025-09-29 20:41:59 +06:00
  • 9b0d3efa6d Deployed e4af279b2 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-29 09:05:56 +00:00
  • e4af279b29 feat(seal): add seal support (#9370) DmitriyLewen 2025-09-29 14:44:40 +06:00
  • 6400ae4f0e Deployed e149094f9 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-26 15:37:05 +00:00
  • e149094f9b docs: fix modules path and update code example (#9539) Nikita Pivkin 2025-09-26 21:13:33 +06:00
  • a4cbd6a138 fix: close file descriptors and pipes on error paths (#9536) Teppei Fukuda 2025-09-26 16:31:59 +04:00
  • eba48afd58 feat: add documentation URL for database lock errors (#9531) Teppei Fukuda 2025-09-26 12:25:44 +04:00
  • 92ebc7e4d7 fix(db): Dowload database when missing but metadata still exists (#9393) tom1299 2025-09-26 09:35:03 +02:00
  • 42b3bf37bb feat(cloudformation): support default values and list results in Fn::FindInMap (#9515) Nikita Pivkin 2025-09-25 15:24:16 +06:00
  • 8e40d27a43 fix(misconf): unmark cty values before access (#9495) Nikita Pivkin 2025-09-25 02:21:07 +06:00
  • 0385cc63df Deployed 7b663d86c to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-24 10:28:04 +00:00
  • 7b663d86ca feat(cli): change --list-all-pkgs default to true (#9510) Teppei Fukuda 2025-09-24 14:06:39 +04:00
  • 404abb3d91 fix(nodejs): parse workspaces as objects for package-lock.json files (#9518) DmitriyLewen 2025-09-24 14:04:23 +06:00
  • 352855ef64 refactor(fs): use underlyingPath to determine virtual files more reliably (#9302) Nikita Pivkin 2025-09-23 20:36:35 +06:00
  • d57b1606c9 refactor: remove google/wire dependency and implement manual DI (#9509) Teppei Fukuda 2025-09-23 17:02:11 +04:00
  • 331cf5d4a4 chore(deps): bump the aws group with 6 updates (#9481) dependabot[bot] 2025-09-23 16:47:01 +04:00
  • 366910bc58 chore(deps): bump the common group across 1 directory with 24 updates (#9507) dependabot[bot] 2025-09-23 09:15:47 +04:00
  • 6ee8342e3e Deployed 842ebdcb4 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-22 12:08:50 +00:00
  • 267a9700fa fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497) Nikita Pivkin 2025-09-22 17:58:47 +06:00
  • 842ebdcb4a docs: move info about detection priority into coverage section (#9469) DmitriyLewen 2025-09-22 17:48:39 +06:00
  • 3f9ae64414 Deployed 6d562a3b4 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-22 07:08:00 +00:00
  • 6d562a3b48 feat(sbom): added support for CoreOS (#9448) amitbhardwaj 2025-09-22 12:16:45 +05:30
  • c9388069a4 fix(misconf): strip build metadata suffixes from image history (#9498) Nikita Pivkin 2025-09-22 12:46:14 +06:00
  • aff03ebab2 feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439) Teppei Fukuda 2025-09-20 18:26:53 +04:00
  • f7d3bfee44 Deployed 8b2575bd2 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-18 11:21:08 +00:00
  • 8b2575bd27 docs: Fix typo in terraform docs (#9492) matt-andersen 2025-09-18 20:59:36 +10:00
  • cb25a07450 feat(redhat): add os-release detection for RHEL-based images (#9458) Chanho Lee 2025-09-15 19:59:48 +09:00
  • 8dce58c684 ci(deps): add 3-day cooldown period for Dependabot updates (#9475) Teppei Fukuda 2025-09-15 13:06:44 +04:00
  • 788f6faffb refactor: migrate from go-json-experiment to encoding/json/v2 (#9422) Teppei Fukuda 2025-09-15 12:46:44 +04:00
  • 1ff9ac7948 fix(vuln): compare nuget package names in lower case (#9456) DmitriyLewen 2025-09-15 13:21:06 +06:00
  • 78a70e2cfd chore: Update release flow to include chocolatey (#9460) Owen Rumney 2025-09-09 19:11:14 +01:00
  • 7d1555a43e Deployed ea0ff34d3 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-09 17:41:13 +00:00
  • ea0ff34d38 docs: document eol supportability (#9434) Itay Shakury 2025-09-09 20:21:25 +03:00
  • 5a98c900cd Deployed 7bcb18126 to v0.66 with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-08 11:15:29 +00:00
  • 045770aeed Deployed 4a2be6b48 to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-08 09:16:41 +00:00
  • 4a2be6b48c docs(report): add nuanses about secret/license scanner in summary table (#9442) DmitriyLewen 2025-09-08 14:56:47 +06:00
  • 4359fe06a0 ci: use environment variables in GitHub Actions for improved security (#9433) Teppei Fukuda 2025-09-05 11:24:31 +04:00
  • 2185c7816a chore: bump Go to 1.24.7 (#9435) jdesouza 2025-09-04 15:04:43 -03:00
  • 33e9d1ea40 Deployed 4517e8c0e to dev with MkDocs 1.6.1 and mike 2.1.3 knqyf263 2025-09-04 08:43:03 +00:00
  • 4517e8c0ef fix(nodejs): use snapshot string as Package.ID for pnpm packages (#9330) amitbhardwaj 2025-09-04 10:22:26 +05:30