gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-05 20:40:16 -08:00
Code Issues Packages Projects Releases Wiki Activity
3,858 Commits 31 Branches 177 Tags
main
Commit Graph

3858 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Itay Shakury
ea0ff34d38 docs: document eol supportability (#9434) 2025-09-09 17:21:25 +00:00
DmitriyLewen
4a2be6b48c docs(report): add nuanses about secret/license scanner in summary table (#9442) 2025-09-08 08:56:47 +00:00
Teppei Fukuda
4359fe06a0 ci: use environment variables in GitHub Actions for improved security (#9433) 2025-09-05 07:24:31 +00:00
jdesouza
2185c7816a chore: bump Go to 1.24.7 (#9435) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-09-04 18:04:43 +00:00
amitbhardwaj
4517e8c0ef fix(nodejs): use snapshot string as Package.ID for pnpm packages (#9330) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-09-04 04:52:26 +00:00
Aqua Security automated builds
a70d8e70a8 ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425) 
Co-authored-by: GitHub Actions <actions@github.com>
 2025-09-02 18:13:15 +00:00
Aqua Security automated builds
7bcb181268 release: v0.66.0 [main] (#9289) v0.66.0 2025-09-02 16:42:22 +00:00
dependabot[bot]
21258954d2 chore(deps): bump the aws group with 7 updates (#9419) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-02 07:47:44 +00:00
Nikita Pivkin
29e9ff7e14 refactor(secret): clarify secret scanner messages (#9409) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-02 06:03:07 +00:00
DmitriyLewen
46ab76a5af fix(cyclonedx): handle multiple license types (#9378) 2025-09-01 12:10:14 +00:00
DmitriyLewen
1ac9b1f07c fix(repo): sanitize git repo URL before inserting into report metadata (#9391) 2025-09-01 11:09:02 +00:00
Teppei Fukuda
6fa3849c10 test: add HTTP basic authentication to git test server (#9407) 2025-09-01 09:42:41 +00:00
Ivo Šmíd
aa7cf4387c fix(sbom): add support for file component type of CycloneDX (#9372) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-01 08:33:46 +00:00
Nikita Pivkin
81d94253c8 fix(misconf): ensure module source is known (#9404) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-30 00:53:23 +00:00
Teppei Fukuda
1d646d6231 ci: migrate GitHub Actions from version tags to SHA pinning (#9405) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-08-29 12:16:27 +00:00
MaineK00n
ce22f54a39 fix: create temp file under composite fs dir (#9387) 2025-08-29 11:02:46 +00:00
dependabot[bot]
db19b34583 chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-08-29 07:15:43 +00:00
Nikita Pivkin
d1de58a7dc refactor: switch to stable azcontainerregistry SDK package (#9319) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-28 07:26:08 +00:00
dependabot[bot]
102cbeecec chore(deps): bump the common group with 7 updates (#9382) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-28 06:28:46 +00:00
Nikita Pivkin
7278718b3f refactor(misconf): migrate from custom Azure JSON parser (#9222) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-27 22:44:02 +00:00
DmitriyLewen
4f2a44ea45 fix(repo): preserve RepoMetadata on FS cache hit (#9389) 2025-08-27 11:08:22 +00:00
cui
9594d63f2b refactor(misconf): use atomic.Int32 (#9385) 2025-08-27 07:18:27 +00:00
dependabot[bot]
8abde2c59a chore(deps): bump the aws group with 6 updates (#9383) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-26 04:36:09 +00:00
Shadab Ansari
2bbad03f16 docs: Fix broken link to "Built-in Checks" (#9375) 2025-08-26 00:43:12 +00:00
DmitriyLewen
5f067ac15e fix(plugin): don't remove plugins when updating index.yaml file (#9358) 2025-08-25 00:19:27 +00:00
Pueringni3
6e99dd304c fix: persistent flag option typo (#9374) 2025-08-24 23:43:16 +00:00
dependabot[bot]
d1adbe3579 chore(deps): bump the common group across 1 directory with 26 updates (#9347) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-24 23:24:41 +00:00
Manveer Singh
84fbf8674d fix(image): use standardized HTTP client for ECR authentication (#9322) 2025-08-22 05:56:21 +00:00
DmitriyLewen
04abb7871d refactor: export systemFileFiltering Post Handler (#9359) 2025-08-22 04:28:07 +00:00
Tomas Fernandez
e2d30feb5e docs: update links to Semaphore pages (#9352) 2025-08-20 13:32:16 +00:00
Semen
03d039f17d fix(conda): memory leak by adding closure method for package.json file (#9349) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-08-20 06:21:56 +00:00
Teppei Fukuda
235c24e71a feat: add timeout handling for cache database operations (#9307) 2025-08-18 08:01:27 +00:00
Nikita Pivkin
04ad0c4fc2 fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-15 05:25:59 +00:00
Nikita Pivkin
d3cd101266 fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-09 10:15:42 +00:00
Rene Leonhardt
ea6663abff chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301) 2025-08-07 15:31:33 +00:00
Nikita Pivkin
298a9941f0 feat(terraform): use .terraform cache for remote modules in plan scanning (#9277) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-06 04:21:08 +00:00
tanhuaan
c9cb3d16ff chore: fix some function names in comment (#9314) 
Signed-off-by: tanhuaan <tanhuaan@outlook.com>
 2025-08-05 13:04:30 +00:00
dependabot[bot]
b7b491094a chore(deps): bump the aws group with 7 updates (#9311) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-05 07:13:23 +00:00
Yuta Tokoi
c3efe5d243 docs: add explanation for how to use non-system certificates (#9081) 2025-08-04 06:41:48 +00:00
dependabot[bot]
406c209f5e chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-08-04 03:33:51 +00:00
Nikita Pivkin
1319d8dc7f fix(misconf): preserve original paths of remote submodules from .terraform (#9294) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-02 05:06:54 +00:00
Nikita Pivkin
c0bd700b29 refactor(terraform): make Scan method of Terraform plan scanner private (#9272) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-02 04:59:13 +00:00
Teppei Fukuda
2458d5e28a fix: suppress debug log for context cancellation errors (#9298) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-08-01 08:27:30 +00:00
Teppei Fukuda
5a5e0972c7 feat(secret): implement streaming secret scanner with byte offset tracking (#9264) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-08-01 08:17:54 +00:00
DmitriyLewen
1473e88b74 fix(python): impove package name normalization (#9290) 2025-08-01 08:04:31 +00:00
yagreut
4d4a2444b6 feat(misconf): added audit config attribute (#9249) 2025-08-01 06:05:55 +00:00
Nikita Pivkin
649eb2f8e6 refactor(misconf): decouple input fs and track extracted files with fs references (#9281) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-01 05:21:38 +00:00
Nikita Pivkin
b77d6e2c14 test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-01 04:58:30 +00:00
Teppei Fukuda
b9fb7e53f6 refactor: simplify Detect function signature (#9280) 2025-07-31 08:52:38 +00:00
Aqua Security automated builds
44aac2c09a ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288) 
Co-authored-by: GitHub Actions <actions@github.com>
 2025-07-31 08:40:01 +00:00