Skip to content

Issues: aquasecurity/trivy

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

163 Open 2,514 Closed
163 Open 2,514 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

bug(sbom): Trivy overwrites Applications when multiple sbom files contain aggregated language type kind/bug Categorizes issue or PR as related to a bug.
#7851 opened Nov 1, 2024 by DmitriyLewen
refactor(misconf): Remove unused options scan/misconfiguration Issues relating to misconfiguration scanning
#7849 opened Nov 1, 2024 by simar7 v0.58.0
@simar7
1
bug(java): We should parse dependencies with unsupported scopes to correctly detect version/skip dependency kind/bug Categorizes issue or PR as related to a bug.
#7844 opened Oct 31, 2024 by DmitriyLewen
License exceptions with a plus sign help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug. scan/license Issues relating to license scanning
#7838 opened Oct 31, 2024 by knqyf263
bug(sbom): Duplicate SBOM packages for multi-module pom.xml files kind/bug Categorizes issue or PR as related to a bug.
#7824 opened Oct 30, 2024 by DmitriyLewen v0.58.0
1
@DmitriyLewen
6
refactor(k8s): add v prefix for Go packages target/kubernetes Issues relating to kubernetes cluster scanning
#7822 opened Oct 30, 2024 by DmitriyLewen v0.58.0
1
@afdesk
fix(misconf): handle null properties in CloudFormation templates kind/bug Categorizes issue or PR as related to a bug. scan/misconfiguration Issues relating to misconfiguration scanning
#7809 opened Oct 29, 2024 by nikpivkin
1
@nikpivkin
feat(java): use remote repositories from settings.xml for pom.xml files help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature.
#7807 opened Oct 29, 2024 by DmitriyLewen
fix(checks): Improve AVD-DS-0005 logic scan/misconfiguration Issues relating to misconfiguration scanning
#7806 opened Oct 29, 2024 by simar7
1
Migrate csaf-poc/csaf_distribution to gocsaf/csaf good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.
#7805 opened Oct 29, 2024 by knqyf263
@thiha-min-thant
5
bug(java): dependOn contains extra dependencies for pom.xml files with modules when using SBOM formats
#7802 opened Oct 28, 2024 by DmitriyLewen v0.58.0
@DmitriyLewen
3
feat(k8s): using default node commands for unknown platform target/kubernetes Issues relating to kubernetes cluster scanning
#7786 opened Oct 24, 2024 by afdesk
1
@afdesk
chore(k8s): Improve testing for k8s scanner target/kubernetes Issues relating to kubernetes cluster scanning
#7768 opened Oct 19, 2024 by simar7
1
@afdesk
fix(spdx): use hasExtractedLicensingInfos for licenses not in the SPDX license list kind/bug Categorizes issue or PR as related to a bug. scan/license Issues relating to license scanning scan/sbom Issues relating to SBOM
#7721 opened Oct 14, 2024 by DmitriyLewen
1
chore(misconf): Remove Go checks scan/misconfiguration Issues relating to misconfiguration scanning
#7718 opened Oct 11, 2024 by simar7 v0.58.0
@simar7 @nikpivkin
fix(secter): set minimal number of characters for AsymmetricPrivateKey help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug. scan/secret Issues relating to secret scanning
#7700 opened Oct 10, 2024 by DmitriyLewen
2
Trivy should use docker context to select the docker daemon help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature. target/container-image Issues relating to container image scanning
#7686 opened Oct 9, 2024 by knqyf263
feat(python): Add support for astral UV help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature.
#7653 opened Oct 4, 2024 by knqyf263
feat(misconf): Improve terraform plan JSON error logging kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#7630 opened Oct 2, 2024 by simar7 v0.58.0
1
@simar7 @nikpivkin
1
bug(k8s): Image scanned from "metadata:annotations:kubectl.kubernetes.io/last-applied-configuration" instead of "spec" kind/bug Categorizes issue or PR as related to a bug.
#7573 opened Sep 23, 2024 by afdesk
@afdesk @michaeljsaenz
7
Use and document Trivy JSON report schema version 2 in the Trivy documentation good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/documentation Categorizes issue or PR as related to documentation.
#7553 opened Sep 19, 2024 by knqyf263
@kushal9897
2
enhancement(report): include/exclude dev deps in analyzers
#7476 opened Sep 10, 2024 by DmitriyLewen v0.58.0
1
@DmitriyLewen
12
feat(misconf): Support symlinks in misconfiguration scanning kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#7456 opened Sep 6, 2024 by simar7
2
feat(redhat): migrate to CSAF VEX
#7452 opened Sep 6, 2024 by knqyf263 v0.58.0
4
reafactor(spdx): save undetected liceneses in ExtractedLicensingInfo kind/bug Categorizes issue or PR as related to a bug.
#7423 opened Aug 30, 2024 by DmitriyLewen
ProTip! Mix and match filters to narrow down what you’re looking for.