3871 Commits

Author SHA1 Message Date
dependabot[bot]
b7b491094a chore(deps): bump the aws group with 7 updates (#9311)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-05 07:13:23 +00:00
Yuta Tokoi
c3efe5d243 docs: add explanation for how to use non-system certificates (#9081) 2025-08-04 06:41:48 +00:00
dependabot[bot]
406c209f5e chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
2025-08-04 03:33:51 +00:00
Nikita Pivkin
1319d8dc7f fix(misconf): preserve original paths of remote submodules from .terraform (#9294)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-08-02 05:06:54 +00:00
Nikita Pivkin
c0bd700b29 refactor(terraform): make Scan method of Terraform plan scanner private (#9272)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-08-02 04:59:13 +00:00
Teppei Fukuda
2458d5e28a fix: suppress debug log for context cancellation errors (#9298)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-08-01 08:27:30 +00:00
Teppei Fukuda
5a5e0972c7 feat(secret): implement streaming secret scanner with byte offset tracking (#9264)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-08-01 08:17:54 +00:00
DmitriyLewen
1473e88b74 fix(python): impove package name normalization (#9290) 2025-08-01 08:04:31 +00:00
yagreut
4d4a2444b6 feat(misconf): added audit config attribute (#9249) 2025-08-01 06:05:55 +00:00
Nikita Pivkin
649eb2f8e6 refactor(misconf): decouple input fs and track extracted files with fs references (#9281)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-08-01 05:21:38 +00:00
Nikita Pivkin
b77d6e2c14 test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-08-01 04:58:30 +00:00
Teppei Fukuda
b9fb7e53f6 refactor: simplify Detect function signature (#9280) 2025-07-31 08:52:38 +00:00
Aqua Security automated builds
44aac2c09a ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)
Co-authored-by: GitHub Actions <actions@github.com>
2025-07-31 08:40:01 +00:00
Nikita Pivkin
b51c789330 fix(fs): avoid shadowing errors in file.glob (#9286)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-31 06:36:29 +00:00
Nikita Pivkin
c4003b2968 test(misconf): move terraform scan tests to integration tests (#9271)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-31 06:36:19 +00:00
Nikita Pivkin
a5907432a7 test(misconf): drop gcp iam test covered by another case (#9285)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-31 06:36:10 +00:00
Stein Arne Storslett
04d018b026 chore(deps): bump to alpine from 3.21.3 to 3.21.4 (#9283)
Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
2025-07-31 05:50:40 +00:00
Aqua Security automated builds
b2b15459ba release: v0.65.0 [main] (#9108) v0.65.0 2025-07-31 05:26:08 +00:00
Owen Rumney
b4ad00f301 fix(cli): ensure correct command is picked by telemetry (#9260) 2025-07-30 10:33:45 +00:00
Teppei Fukuda
ed4640ec27 feat(flag): add schema validation for --server flag (#9270)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-30 07:04:59 +00:00
dependabot[bot]
1a0c038fa5 chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-30 05:39:16 +00:00
Nikita Pivkin
011cefc325 ci: skip undefined labels in discussion triage action (#9175)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: Itay <itay@itaysk.com>
2025-07-29 11:50:48 +00:00
Teppei Fukuda
f4b2cf10e9 feat(repo): add git repository metadata to reports (#9252)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2025-07-29 11:49:58 +00:00
DmitriyLewen
b4193d0d31 fix(license): handle WITH operator for LaxSplitLicenses (#9232) 2025-07-29 09:03:58 +00:00
Teppei Fukuda
d2d0ec2b6d chore: add modernize tool integration for code modernization (#9251)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-29 07:13:54 +00:00
Teppei Fukuda
54832a77b5 fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-28 14:25:47 +00:00
Teppei Fukuda
8f5b56005a chore: implement process-safe temp file cleanup (#9241)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-28 13:49:03 +00:00
Teppei Fukuda
6095984d53 fix: prevent graceful shutdown message on normal exit (#9244) 2025-07-25 08:51:40 +00:00
Nikita Pivkin
77bab7b6d2 fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-25 04:48:12 +00:00
Teppei Fukuda
2c05882f45 feat: add graceful shutdown with signal handling (#9242)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
2025-07-24 11:05:27 +00:00
Owen Rumney
b5da1b8d61 chore: update template URL for brew formula (#9221) 2025-07-24 07:38:39 +00:00
Teppei Fukuda
4bd7512e90 test: add end-to-end testing framework with image scan and proxy tests (#9231)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-24 07:06:01 +00:00
DmitriyLewen
5c155e34fb refactor(db): use Getter interface with GetParams for trivy-db sources (#9239) 2025-07-23 07:10:58 +00:00
DmitriyLewen
67379667d2 ci: specify repository for gh cache delete in canary worklfow (#9240) 2025-07-23 06:07:23 +00:00
Teppei Fukuda
24715ea607 ci: remove invalid --confirm flag from gh cache delete command in canary builds (#9236) 2025-07-23 04:33:18 +00:00
yagreut
7ebc129ab7 fix(misconf): fix log bucket in schema (#9235)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-22 17:31:45 +00:00
dependabot[bot]
3ada677d64 chore(deps): bump the common group across 1 directory with 24 updates (#9228)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-22 11:47:17 +00:00
Teppei Fukuda
74f92b56b9 ci: move runner.os context from job-level env to step-level in canary workflow (#9233)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-22 11:06:02 +00:00
afdesk
b4f2457ea1 chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214) 2025-07-21 22:05:47 +00:00
yagreut
110f80ea29 feat(misconf): added logging and versioning to the gcp storage bucket (#9226) 2025-07-21 17:39:26 +00:00
Teppei Fukuda
1163b044c7 fix(server): add HTTP transport setup to server mode (#9217)
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
2025-07-21 09:01:58 +00:00
Owen Rumney
362be17f7e chore: update the rpm download Update (#9202) 2025-07-18 11:11:08 +00:00
Harshil Gupta
861d51e99a feat(alma): add AlmaLinux 10 support (#9207) 2025-07-17 06:55:19 +00:00
DmitriyLewen
fe96436b99 fix(nodejs): don't use prerelease logic for compare npm constraints (#9208) 2025-07-17 06:40:44 +00:00
DmitriyLewen
6fafbeb606 fix(rootio): fix severity selection (#9181) 2025-07-17 06:14:28 +00:00
Teppei Fukuda
aa944cc6da fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194) 2025-07-16 11:57:44 +00:00
AndreyChupin
adfa879e4e fix(cli): panic: attempt to get os.Args[1] when len(os.Args) < 2 (#9206)
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
2025-07-16 07:32:14 +00:00
Nikita Pivkin
51aa022260 fix(misconf): correctly adapt azure storage account (#9138)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-16 06:20:57 +00:00
yagreut
263845cfc1 feat(misconf): add private ip google access attribute to subnetwork (#9199)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-07-15 21:45:50 +00:00
Stepan
60723e6cfc feat(report): add CVSS vectors in sarif report (#9157) 2025-07-14 09:22:56 +00:00