gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-12 15:50:15 -08:00
Code Issues Packages Projects Releases Wiki Activity
3,751 Commits 29 Branches 177 Tags
05375d17f712aeab5ff2eff33081d2e1712a7e70
Commit Graph

1731 Commits

Author SHA1 Message Date
Mikel Olasagasti Uranga
05375d17f7 chore(deps): update to module-compatible docker-credential-gcr/v2 (#9591) 
Signed-off-by: Mikel Olasagasti Uranga <mikel@olasagasti.info>
 2025-10-07 06:53:27 +00:00
Nikita Pivkin
c638fc646c feat: allow ignoring findings by type in Rego (#9578) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-10-06 18:17:23 +00:00
Nikita Pivkin
19615a8462 refactor(misconf): add ID to scan.Rule (#9573) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-10-06 08:33:06 +00:00
DmitriyLewen
e286c5e207 fix(java): update order for resolving package fields from multiple demManagement (#9575) 2025-10-06 07:46:19 +00:00
Mikel Olasagasti Uranga
9058d51cb9 chore(deps): Switch to go-viper/mapstructure (#9579) 
Signed-off-by: Mikel Olasagasti Uranga <mikel@olasagasti.info>
 2025-10-06 03:25:21 +00:00
Owen Rumney
719ea29d31 chore: add context to the cache interface (#9565) 2025-10-03 09:37:05 +00:00
DmitriyLewen
78f0d4ae03 fix(vex): don't suppress vulns for packages with infinity loop (#9465) 2025-09-30 06:41:10 +00:00
DmitriyLewen
fa6f1bfecf fix(aws): use BuildableClient insead of xhttp.Client (#9436) 2025-09-30 05:54:12 +00:00
Nikita Pivkin
e7c16a756c refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-09-30 03:33:52 +00:00
afdesk
c0c7a6bf1b fix(k8s): disable parallel traversal with fs cache for k8s images (#9534) 2025-09-30 01:44:51 +00:00
Nikita Pivkin
bfd2f6ba69 fix(misconf): handle tofu files in module detection (#9486) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-29 14:41:59 +00:00
DmitriyLewen
e4af279b29 feat(seal): add seal support (#9370) 2025-09-29 08:44:40 +00:00
Nikita Pivkin
e149094f9b docs: fix modules path and update code example (#9539) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-26 15:13:33 +00:00
Teppei Fukuda
a4cbd6a138 fix: close file descriptors and pipes on error paths (#9536) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-09-26 12:31:59 +00:00
Teppei Fukuda
eba48afd58 feat: add documentation URL for database lock errors (#9531) 2025-09-26 08:25:44 +00:00
tom1299
92ebc7e4d7 fix(db): Dowload database when missing but metadata still exists (#9393) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-26 07:35:03 +00:00
Nikita Pivkin
42b3bf37bb feat(cloudformation): support default values and list results in Fn::FindInMap (#9515) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-25 09:24:16 +00:00
Nikita Pivkin
8e40d27a43 fix(misconf): unmark cty values before access (#9495) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-24 20:21:07 +00:00
Teppei Fukuda
7b663d86ca feat(cli): change --list-all-pkgs default to true (#9510) 2025-09-24 10:06:39 +00:00
DmitriyLewen
404abb3d91 fix(nodejs): parse workspaces as objects for package-lock.json files (#9518) 2025-09-24 08:04:23 +00:00
Nikita Pivkin
352855ef64 refactor(fs): use underlyingPath to determine virtual files more reliably (#9302) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-23 14:36:35 +00:00
Teppei Fukuda
d57b1606c9 refactor: remove google/wire dependency and implement manual DI (#9509) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-09-23 13:02:11 +00:00
dependabot[bot]
366910bc58 chore(deps): bump the common group across 1 directory with 24 updates (#9507) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-23 05:15:47 +00:00
Nikita Pivkin
267a9700fa fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-09-22 11:58:47 +00:00
amitbhardwaj
6d562a3b48 feat(sbom): added support for CoreOS (#9448) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-22 06:46:45 +00:00
Nikita Pivkin
c9388069a4 fix(misconf): strip build metadata suffixes from image history (#9498) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-22 06:46:14 +00:00
Teppei Fukuda
aff03ebab2 feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-20 14:26:53 +00:00
Chanho Lee
cb25a07450 feat(redhat): add os-release detection for RHEL-based images (#9458) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-15 10:59:48 +00:00
Teppei Fukuda
788f6faffb refactor: migrate from go-json-experiment to encoding/json/v2 (#9422) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
Co-authored-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-15 08:46:44 +00:00
amitbhardwaj
4517e8c0ef fix(nodejs): use snapshot string as Package.ID for pnpm packages (#9330) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-09-04 04:52:26 +00:00
Nikita Pivkin
29e9ff7e14 refactor(secret): clarify secret scanner messages (#9409) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-09-02 06:03:07 +00:00
DmitriyLewen
46ab76a5af fix(cyclonedx): handle multiple license types (#9378) 2025-09-01 12:10:14 +00:00
DmitriyLewen
1ac9b1f07c fix(repo): sanitize git repo URL before inserting into report metadata (#9391) 2025-09-01 11:09:02 +00:00
Teppei Fukuda
6fa3849c10 test: add HTTP basic authentication to git test server (#9407) 2025-09-01 09:42:41 +00:00
Ivo Šmíd
aa7cf4387c fix(sbom): add support for file component type of CycloneDX (#9372) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-01 08:33:46 +00:00
Nikita Pivkin
81d94253c8 fix(misconf): ensure module source is known (#9404) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-30 00:53:23 +00:00
MaineK00n
ce22f54a39 fix: create temp file under composite fs dir (#9387) 2025-08-29 11:02:46 +00:00
Nikita Pivkin
d1de58a7dc refactor: switch to stable azcontainerregistry SDK package (#9319) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-28 07:26:08 +00:00
Nikita Pivkin
7278718b3f refactor(misconf): migrate from custom Azure JSON parser (#9222) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-27 22:44:02 +00:00
DmitriyLewen
4f2a44ea45 fix(repo): preserve RepoMetadata on FS cache hit (#9389) 2025-08-27 11:08:22 +00:00
cui
9594d63f2b refactor(misconf): use atomic.Int32 (#9385) 2025-08-27 07:18:27 +00:00
DmitriyLewen
5f067ac15e fix(plugin): don't remove plugins when updating index.yaml file (#9358) 2025-08-25 00:19:27 +00:00
Pueringni3
6e99dd304c fix: persistent flag option typo (#9374) 2025-08-24 23:43:16 +00:00
Manveer Singh
84fbf8674d fix(image): use standardized HTTP client for ECR authentication (#9322) 2025-08-22 05:56:21 +00:00
DmitriyLewen
04abb7871d refactor: export systemFileFiltering Post Handler (#9359) 2025-08-22 04:28:07 +00:00
Semen
03d039f17d fix(conda): memory leak by adding closure method for package.json file (#9349) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-08-20 06:21:56 +00:00
Teppei Fukuda
235c24e71a feat: add timeout handling for cache database operations (#9307) 2025-08-18 08:01:27 +00:00
Nikita Pivkin
04ad0c4fc2 fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-15 05:25:59 +00:00
Nikita Pivkin
d3cd101266 fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-09 10:15:42 +00:00
Nikita Pivkin
298a9941f0 feat(terraform): use .terraform cache for remote modules in plan scanning (#9277) 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
 2025-08-06 04:21:08 +00:00