gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-12 07:40:48 -08:00
Code Issues Packages Projects Releases Wiki Activity
3,839 Commits 29 Branches 177 Tags
e1f3f28ae4b86dd7f518a261080dc8d24ac2cdad
Commit Graph

39 Commits

Author SHA1 Message Date
Thomas Grininger
e1f3f28ae4 feat(image): add Sigstore bundle SBOM support (#9516) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-11-25 06:10:06 +00:00
Teppei Fukuda
d8eaaeb611 feat(sbom): add support for SPDX attestations (#9829) 2025-11-21 08:44:54 +00:00
Teppei Fukuda
d020f2690e feat(report): add image reference to report metadata (#9729) 2025-10-31 07:26:39 +00:00
Teppei Fukuda
a9a3031675 feat(image): add RepoTags support for Docker archives (#9690) 
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
 2025-10-22 06:50:13 +00:00
Owen Rumney
719ea29d31 chore: add context to the cache interface (#9565) 2025-10-03 09:37:05 +00:00
Teppei Fukuda
aff03ebab2 feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2025-09-20 14:26:53 +00:00
Matthieu MOREL
6562082e28 fix: unused-parameter rule from revive (#8794) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2025-04-30 09:17:24 +00:00
DmitriyLewen
a95cab0eab feat(image): save layers metadata into report (#8394) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2025-04-23 16:31:43 +00:00
Teppei Fukuda
529957eac1 feat: replace TinyGo with standard Go for WebAssembly modules (#8496) 2025-03-07 10:10:15 +00:00
Teppei Fukuda
fe09410ed4 chore: replace deprecated tenv linter with usetesting (#8504) 2025-03-06 12:26:20 +00:00
Teppei Fukuda
24d0e2bf2d test: use memory cache (#8403) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2025-02-17 07:15:32 +00:00
DmitriyLewen
3e503a0cc2 chore: bump mockery to update v2.52.2 version and rebuild mock files (#8390) 2025-02-14 07:00:18 +00:00
DmitriyLewen
266d9b1f4b refactor(sbom): add sbom prefix + filepaths for decode log messages (#7074) 2024-07-03 04:24:33 +00:00
Teppei Fukuda
6dff4223ed refactor: unify cache implementations (#6977) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-06-21 06:35:33 +00:00
Matthieu MOREL
48bdc6e734 ci(deps): fix gci and gofmt in ".*_test.go$" (#6721) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-22 02:55:16 +00:00
Matthieu MOREL
9d26ae88d6 ci(deps): enable testifylint linter on .*_test.go$ (#6688) 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
 2024-05-16 04:29:06 +00:00
Teppei Fukuda
6a72dd47ae refactor: move artifact types under artifact package to avoid import cycles (#6652) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-05-09 16:18:37 +00:00
Teppei Fukuda
3eecfc6b6e refactor: unify Library and Package structs (#6633) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2024-05-07 12:25:52 +00:00
Teppei Fukuda
94d6e8ced6 refactor: replace zap with slog (#6466) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
 2024-04-11 18:59:09 +00:00
Teppei Fukuda
8fcef352b3 refactor(sbom): add intermediate representation for BOM (#6240) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
 2024-03-12 06:56:10 +00:00
DmitriyLewen
fb36c4ed09 refactor(sbom): use new metadata.tools struct for CycloneDX (#5981) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2024-01-23 13:59:48 +00:00
Teppei Fukuda
d0c81e23c4 feat(vex): add PURL matching for CSAF VEX (#5890) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2024-01-10 06:37:19 +00:00
Teppei Fukuda
1607eee77c refactor: move PkgRef under PkgIdentifier (#5831) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2023-12-29 06:52:36 +00:00
Juan Ariza Toledano
1f0d6290c3 feat(vuln): include pkg identifier on detected vulnerabilities (#5439) 
Signed-off-by: juan131 <jariza@vmware.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2023-12-27 07:54:56 +00:00
Teppei Fukuda
07075696d1 refactor: replace with sortable packages (#4858) 2023-07-24 07:09:14 +00:00
chenk
85c681d443 feat: kbom and cyclonedx v1.5 spec support (#4708) 
* feat: kbom and cyclonedx v1.5 spec support

Signed-off-by: chenk <hen.keinan@gmail.com>

* feat: kbom and cyclonedx v1.5 spec support

Signed-off-by: chenk <hen.keinan@gmail.com>

* feat: kbom and cyclonedx v1.5 spec support

Signed-off-by: chenk <hen.keinan@gmail.com>

* feat: feat: kbom and cyclonedx 1.5 spec support

Signed-off-by: chenk <hen.keinan@gmail.com>

* fix: unmarshal bom on v1.5 return invalid specification version

Signed-off-by: chenk <hen.keinan@gmail.com>

* feat: cyclonedx-1.5 spec support

Signed-off-by: chenk <hen.keinan@gmail.com>

---------

Signed-off-by: chenk <hen.keinan@gmail.com>
 2023-06-25 13:47:06 +00:00
Teppei Fukuda
9ef01133c8 feat: add SBOM analyzer (#4210) 
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2023-06-02 09:34:07 +03:00
saso
ba9b0410c9 feat(sbom): add support for CycloneDX JSON Attestation of the correct specification (#3849) 2023-03-19 15:40:58 +02:00
Teppei Fukuda
75c96bd968 feat: add post-analyzers (#3640) 
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
 2023-02-20 13:08:26 +02:00
DmitriyLewen
fe3831e0fe feat(ubuntu): added support ubuntu ESM versions (#1893) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-12-27 10:24:28 +02:00
Owen Rumney
5190f9566b feat: Adding support for Windows testing (#3037) 
Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-12-22 22:54:18 +02:00
Aibek
f4e970f374 fix(misconf): Bump in-toto-golang with correct CycloneDX predicate (#3068) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-10-25 23:41:27 +03:00
Teppei Fukuda
02a73f0138 feat(vuln): support non-packaged binaries (#3019) 2022-10-25 20:02:53 +03:00
saso
192fd78ca2 feat(sbom): scan sbom attestation in the rekor record (#2699) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-09-15 20:16:39 +03:00
Masahiro331
9f6680a1fa feat(sbom): Add unmarshal for spdx (#2868) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-09-15 08:39:59 +03:00
Teppei Fukuda
39f83afefe chore: bump Go to 1.19 (#2861) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
 2022-09-14 11:41:55 +03:00
saso
317a026616 feat(sbom): add support for scanning a sbom attestation (#2652) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-08-08 16:27:05 +03:00
Teppei Fukuda
e848e6d009 refactor(cyclonedx): implement json.Unmarshaler (#2662) 
* refactor(cyclonedx): implement json.Unmarshaler

* fix: use pointer
 2022-08-04 14:15:33 +03:00
Masahiro331
5b821d3b13 feat(sbom): add cyclonedx sbom scan (#2203) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2022-07-03 20:03:21 +03:00