3871 Commits

Author SHA1 Message Date
simar7
f23d2f66c1 docs(misconf): simplify misconfiguration docs (#9030) 2025-06-17 22:23:42 +00:00
Nikita Pivkin
a58c36de12 fix(misconf): move disabled checks filtering after analyzer scan (#9002)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-17 05:39:27 +00:00
Teppei Fukuda
64aea25e2a docs: add PR review policy for maintainers (#9032) 2025-06-16 07:31:59 +00:00
Teppei Fukuda
198789a07b fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034) 2025-06-16 04:55:30 +00:00
Nikita Pivkin
ae85c40858 test: improve and extend tests for iac/adapters/arm (#9028)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-14 05:37:53 +00:00
afdesk
7cfdbf0cd9 chore: bump up Go version to 1.24.4 (#9031) 2025-06-12 08:45:52 +00:00
Owen Rumney
19efa9fd37 feat(cli): add version constraints to annoucements (#9023) 2025-06-12 08:09:39 +00:00
Nikita Pivkin
40d017b67d fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-11 06:42:11 +00:00
DmitriyLewen
87118a0ec4 feat(ubuntu): add eol date for 20.04-ESM (#8981) 2025-06-10 07:39:34 +00:00
DmitriyLewen
87fda76f38 fix(report): don't panic when report contains vulns, but doesn't contain packages for table format (#8549) 2025-06-10 05:22:35 +00:00
DmitriyLewen
875ec3a9d2 fix(nodejs): correctly parse packages array of bun.lock file (#8998) 2025-06-09 11:52:30 +00:00
Nikita Pivkin
454b894098 refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2025-06-09 10:01:53 +00:00
Wolfgang Ellsässer
15f421faf6 docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)
Co-authored-by: wollomatic <wollomatic@users.noreply.github.com>
2025-06-09 08:30:24 +00:00
Jason Swank
57801d0324 feat(misconf): add OpenTofu file extension support (#8747) 2025-06-07 02:51:55 +00:00
Nikita Pivkin
b91284ac0d refactor(misconf): set Trivy version by default in Rego scanner (#9001)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-06 22:02:46 +00:00
Itay Shakury
e1beba2f29 docs: fix assets with versioning (#8996) 2025-06-05 19:07:54 +00:00
Itay Shakury
5d050ce274 docs: add partners page (#8988) 2025-06-05 13:20:55 +00:00
Chris Novakovic
94b12a8cd4 chore(alpine): add EOL date for Alpine 3.22 (#8992) 2025-06-05 13:02:56 +00:00
DmitriyLewen
4ed78e39af fix: don't show corrupted trivy-db warning for first run (#8991) 2025-06-05 11:00:16 +00:00
Aayan Mateen
a61978809b Update installation.md (#8979) 2025-06-04 06:29:28 +00:00
Nikita Pivkin
65e155fdaf feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-04 05:31:07 +00:00
afdesk
521be3a178 chore(k8s): update comments with deprecated command format (#8964) 2025-06-03 06:54:45 +00:00
DmitriyLewen
14d2b83d4b chore: fix errors and typos in docs (#8963) 2025-06-03 05:36:44 +00:00
Owen Rumney
ef5f8de8da fix: Add missing version check flags (#8951)
Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2025-06-02 07:45:34 +00:00
Romain Geissler @ Amadeus
48258a701a feat(redhat): Add EOL date for RHEL 10. (#8910) 2025-06-02 06:09:20 +00:00
simar7
b813527449 fix: Correctly check for semver versions for trivy version check (#8948) 2025-05-30 17:20:18 +00:00
Naimuddin Shaik
c29bb21973 refactor(server): change custom advisory and vulnerability data types fr… (#8923)
Co-authored-by: knqyf263 <knqyf263@gmail.com>
2025-05-30 04:54:11 +00:00
Aqua Security automated builds
c0cc8a2c47 ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)
Co-authored-by: GitHub Actions <actions@github.com>
2025-05-30 00:42:57 +00:00
Aqua Security automated builds
69093d2c23 release: v0.63.0 [main] (#8809) v0.63.0 2025-05-29 16:59:01 +00:00
Nikita Pivkin
7e9a54cd6b fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-29 16:35:33 +00:00
simar7
78e3304bbe chore(deps): Bump trivy-checks (#8934)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-29 12:37:47 +00:00
DmitriyLewen
22f040f947 fix(julia): add Relationship field support (#8939) 2025-05-29 11:26:55 +00:00
Daniel Wachter
c2dde33c3f feat(minimos): Add support for MinimOS (#8792)
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2025-05-29 11:21:22 +00:00
Teppei Fukuda
104bbc18ea feat(alpine): add maintainer field extraction for APK packages (#8930)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
2025-05-29 10:47:33 +00:00
Ori
c7b8cc392e feat(echo): Add Echo Support (#8833)
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2025-05-29 10:33:29 +00:00
Romain Geissler @ Amadeus
906b037cff fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924) 2025-05-29 09:55:33 +00:00
Teppei Fukuda
b15d9a60e6 fix(wolfi): support new APK database location (#8937)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
2025-05-29 08:20:12 +00:00
afdesk
4f1ab23869 feat(k8s): get components from namespaced resources (#8918) 2025-05-29 03:50:21 +00:00
Nikita Pivkin
5bae2626e0 refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-29 00:40:20 +00:00
Nikita Pivkin
4a7ebb70b4 refactor(terraform): remove result sorting from scanner (#8928)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-28 21:30:22 +00:00
simar7
3b2a3976ac feat(misconf): Add support for Minimum Trivy Version (#8880)
Signed-off-by: Simar <simar@linux.com>
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-28 21:22:21 +00:00
Itay Shakury
1d420e669f docs: improve skipping files documentation (#8749) 2025-05-28 12:09:48 +00:00
Owen Rumney
5a0bf9ed31 feat(cli): Add available version checking (#8553)
Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
Co-authored-by: Itay <itay@itaysk.com>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
2025-05-28 08:09:16 +00:00
Ashwani Kumar Kamal
7ca656d54b feat(nodejs): add a bun.lock analyzer (#8897)
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2025-05-28 07:14:54 +00:00
Steven Masley
8939451174 feat: terraform parser option to set current working directory (#8909) 2025-05-27 18:05:51 +00:00
Peter Thomas
60fef1b615 perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2025-05-27 10:17:37 +00:00
Nikita Pivkin
aaecc29e90 feat(misconf): export raw Terraform data to Rego (#8741)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-27 04:34:17 +00:00
Nikita Pivkin
6c7cb7ad2d refactor(terraform): simplify AllReferences method signature in Attribute (#8906)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-05-24 00:09:04 +00:00
Teppei Fukuda
93e6680b1c fix: check post-analyzers for StaticPaths (#8904) 2025-05-23 08:42:32 +00:00
David du Colombier
07ef63b483 feat: add Bottlerocket OS package analyzer (#8653) 2025-05-23 07:50:59 +00:00