github aquasecurity/trivy v0.38.0

latest releases: v0.57.0, v0.56.2, v0.56.1...
20 months ago

⚡Release highlights and summary⚡

👉 #3719

Changelog

  • bc08366 fix(cli): pass integer to exit-on-eol (#3716)
  • 23cdac0 feat: add kubernetes pss compliance (#3498)
  • 302c8ae feat: Adding --module-dir and --enable-modules (#3677)
  • 34120f4 feat: add special IDs for filtering secrets (#3702)
  • e399ed8 chore(deps): Update defsec (#3713)
  • ef7b762 docs(misconf): Add guide on input schema (#3692)
  • 00daebc feat(go): support dependency graph and show only direct dependencies in the tree (#3691)
  • 98d1031 feat: docker multi credential support (#3631)
  • b791362 feat: summarize vulnerabilities in compliance reports (#3651)
  • 719fdb1 feat(python): parse pyproject.toml alongside poetry.lock (#3695)
  • 3ff5699 feat(python): add dependency tree for poetry lock file (#3665)
  • 33909d9 fix(cyclonedx): incompliant affect ref (#3679)
  • d85a3e0 chore(helm): update skip-db-update environment variable (#3657)
  • 551899c fix(spdx): change CreationInfo timestamp format RFC3336Nano to RFC3336 (#3675)
  • 3aaa2cf fix(sbom): export empty dependencies in CycloneDX (#3664)
  • 9d1300c docs: java-db air-gap doc tweaks (#3561)
  • 793cc43 feat(go): license support (#3683)
  • 6a3294e feat(ruby): add dependency tree/location support for Gemfile.lock (#3669)
  • e9dc21d fix(k8s): k8s label size (#3678)
  • 12976d4 fix(cyclondx): fix array empty value, null to [] (#3676)
  • 1dc2b34 refactor: rewrite gomod analyzer as post-analyzer (#3674)
  • 92eaf63 feat: config outdated-api result filtered by k8s version (#3578)
  • 9af436b fix: Update to Alpine 3.17.2 (#3655)
  • 88ee68d feat: add support for virtual files (#3654)
  • 75c96bd feat: add post-analyzers (#3640)
  • baea399 chore(deps): updates wazero to 1.0.0-pre.9 (#3653)
  • 7ca0db1 chore(deps): bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#3528)
  • 866999e chore(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.18 (#3633)
  • b7bfb9a feat(python): add dependency locations for Pipfile.lock (#3614)
  • 9badef2 chore(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 (#3648)
  • d856595 fix(java): fix groupID selection by ArtifactID for jar files. (#3644)
  • fe7c26a chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.63.1 to 1.85.0 (#3607)
  • f251dfc fix(aws): Adding a fix for update-cache flag that is not applied on AWS scans. (#3619)
  • 9be8062 feat(cli): add command completion (#3061)
  • 370098d docs(misconf): update dockerfile link (#3627)
  • 32acd29 feat(flag): add exit-on-eosl option (#3423)
  • aa8e185 chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 (#3533)
  • 86603bb fix(cli): make java db repository configurable (#3595)
  • 7b1e173 chore: bump trivy-kubernetes (#3613)

Don't miss a new trivy release

NewReleases is sending notifications on new releases.