gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-12 15:50:15 -08:00
Code Issues Packages Projects Releases Wiki Activity
2,935 Commits 29 Branches 177 Tags
6dff4223ed47f7be2fa5166f1e2c15240109cd5f
Commit Graph

350 Commits

Author SHA1 Message Date
Teppei Fukuda
6dff4223ed refactor: unify cache implementations (#6977) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-06-21 06:35:33 +00:00
Teppei Fukuda
983ac15f22 ci: add depguard (#6963) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-06-20 02:48:08 +00:00
Michael Stringer
f18d035ae1 feat(java): add support for sbt projects using sbt-dependency-lock (#6882) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-06-19 08:46:22 +00:00
DmitriyLewen
38b35dd3c8 fix(c): don't skip conan files from file-patterns and scan .conan2 cache dir (#6949) 2024-06-19 06:48:23 +00:00
DmitriyLewen
0af5730cbe fix(image): parse image.inspect.Created field only for non-empty values (#6948) 2024-06-19 04:45:56 +00:00
DmitriyLewen
baa1216895 test: bump docker API to 1.45 (#6914) 2024-06-13 07:34:39 +00:00
Teppei Fukuda
089b953462 fix(debian): take installed files from the origin layer (#6849) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-06-10 06:37:39 +00:00
DmitriyLewen
bb26445e3d fix(secret): Asymmetric Private Key shouldn't start with space (#6867) 2024-06-07 04:58:27 +00:00
DmitriyLewen
faa9d92cfe fix(python): compare pkg names from poetry.lock and pyproject.toml in lowercase (#6852) 2024-06-05 07:41:39 +00:00
Teppei Fukuda
b7b8cdc9e9 test: replace embedded Git repository with dynamically created repository (#6824) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-06-03 07:34:28 +00:00
guoguangwu
aa0c413814 fix: close testfile (#6830) 
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
 2024-06-01 06:58:20 +00:00
DmitriyLewen
29615be85e feat(python): add license support for requirement.txt files (#6782) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-05-30 08:29:29 +00:00
Teppei Fukuda
5b0bc5823e chore: improve error message for image not found (#6822) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-05-30 07:11:13 +00:00
Matthieu MOREL
aa59489fa8 ci(deps): use modules instead of incompatible version (#6805) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-29 10:35:09 +00:00
Matthieu MOREL
5ccfd17fd8 ci(deps): fix ineffassign and bodyclose in ".*_test.go$" (#6777) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-28 05:49:03 +00:00
Matthieu MOREL
21114c98be ci(deps): fix govet in ".*_test.go$" (#6736) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-27 02:56:54 +00:00
Nikita Pivkin
ebb123f37f chore: replace interface{} with any (#6751) 2024-05-27 02:53:19 +00:00
Matthieu MOREL
e86bacbd6d ci(deps): fix gocritic in ".*_test.go$" (#6763) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-24 09:03:26 +00:00
Matthieu MOREL
c3e734f659 ci(deps): fix tenv in ".*_test.go$" (#6748) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-23 04:50:01 +00:00
Matthieu MOREL
48bdc6e734 ci(deps): fix gci and gofmt in ".*_test.go$" (#6721) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-22 02:55:16 +00:00
Teppei Fukuda
9515695d45 feat(vex): support non-root components for products in OpenVEX (#6728) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2024-05-21 10:00:51 +00:00
DmitriyLewen
2bc54ad275 feat(python): add line number support for requirement.txt files (#6729) 2024-05-20 16:55:36 +00:00
Matthieu MOREL
bbaf5952bc ci(deps): enable require-error rule from testifylint linter (#6718) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-20 07:12:43 +00:00
chenk
ff32deb7bf fix: node-collector high and critical cves (#6707) 
Signed-off-by: chenk <hen.keinan@gmail.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-05-20 05:09:27 +00:00
Luke Young
e7f14f729d Merge pull request from GHSA-xcq4-m2r3-cmrj 
* Update azure.go

* Update ecr.go

* Update google.go

* Update ecr_test.go

* Update azure_test.go

* Update google_test.go
 2024-05-20 07:10:09 +04:00
Teppei Fukuda
d6dc56732b feat(plugin): specify plugin version (#6683) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-05-17 09:29:19 +00:00
Matthieu MOREL
903bd69abd ci(deps): update golangci-lint-action and enable testifylint linter on "integration/*" (#6706) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-17 08:05:47 +00:00
Matthieu MOREL
9d26ae88d6 ci(deps): enable testifylint linter on .*_test.go$ (#6688) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-16 04:29:06 +00:00
Octogonapus
fecafb1fc5 feat: Add Julia language analyzer support (#5635) 2024-05-15 02:56:48 +00:00
guangwu
5caf4377f3 fix: close APKINDEX archive file (#6672) 
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
 2024-05-13 02:45:19 +00:00
Teppei Fukuda
6a72dd47ae refactor: move artifact types under artifact package to avoid import cycles (#6652) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-05-09 16:18:37 +00:00
Teppei Fukuda
3eecfc6b6e refactor: unify Library and Package structs (#6633) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-05-07 12:25:52 +00:00
Teppei Fukuda
8016b821a2 fix(fs): handle default skip dirs properly (#6628) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-05-04 05:34:54 +00:00
Nikita Pivkin
7a25dadb44 fix(misconf): load cached tf modules (#6607) 2024-05-04 04:24:39 +00:00
Teppei Fukuda
998f750432 feat: introduce package UIDs for improved vulnerability mapping (#6583) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-05-03 11:14:34 +00:00
simar7
37da98df45 feat(misconf): Use updated terminology for misconfiguration checks (#6476) 
Signed-off-by: Simar <simar@linux.com>
 2024-05-02 18:16:17 +00:00
DmitriyLewen
e3bef02018 feat: add support environment.yaml files (#6569) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-04-29 10:33:53 +00:00
Teppei Fukuda
2d090ef2df feat(go): add main module (#6574) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-04-27 10:00:14 +00:00
Teppei Fukuda
6343e4fc71 feat: add relationships (#6563) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-04-27 09:15:12 +00:00
Yaney
9aca98cca8 fix(debian): sort dpkg info before parsing due to exclude directories (#6551) 2024-04-26 07:15:29 +00:00
DmitriyLewen
5dd9bd4701 feat(c): add license support for conan lock files (#6329) 2024-04-24 05:29:02 +00:00
DmitriyLewen
e32215c99d feat(go): parse main module of go binary files (#6530) 
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2024-04-22 11:58:44 +00:00
Teppei Fukuda
13e72eca58 refactor: remove parallel walk (#5180) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-04-17 18:24:18 +00:00
DmitriyLewen
46d5abad42 fix(secret): convert severity for custom rules (#6500) 2024-04-16 07:51:03 +00:00
Pete Wagner
d82d6cb731 feat(image): goversion as stdlib (#6277) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-04-15 18:25:04 +00:00
Teppei Fukuda
94d6e8ced6 refactor: replace zap with slog (#6466) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
 2024-04-11 18:59:09 +00:00
DmitriyLewen
8baccd7909 fix(db): check schema version for image name only (#6410) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-04-02 11:22:43 +00:00
DmitriyLewen
9d7f5c948e fix: use 0600 perms for tmp files for post analyzers (#6386) 2024-03-27 05:32:22 +00:00
DmitriyLewen
f6c5d58001 feat(java): add support licenses and graph for gradle lock files (#6140) 2024-03-19 00:59:31 +00:00
DmitriyLewen
317792433e fix: increase the default buffer size for scanning dpkg status files by 2 times (#6298) 2024-03-18 09:42:54 +00:00