Skip to content

Issues: aquasecurity/trivy

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

164 Open 2,519 Closed
164 Open 2,519 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

fix(misconf): load full Terraform module kind/bug Categorizes issue or PR as related to a bug. scan/misconfiguration Issues relating to misconfiguration scanning
#7924 opened Nov 15, 2024 by nikpivkin
2 tasks done
1
@nikpivkin
bug(redhat): we don't need to return error if redhat image doesn't contain content_sets kind/bug Categorizes issue or PR as related to a bug.
#7911 opened Nov 13, 2024 by DmitriyLewen
1
@DmitriyLewen
4
fix(misconf): check only clusters in AVD-AWS-0343 bug scan/misconfiguration Issues relating to misconfiguration scanning
#7899 opened Nov 11, 2024 by nikpivkin
2 tasks done
v0.58.0
@nikpivkin
Add HTTP support for downloading HTTP kind/feature Categorizes issue or PR as related to a new feature.
#7891 opened Nov 8, 2024 by knqyf263 v0.58.0
1
@knqyf263
1
bug(os): apline removed packages don't have UID kind/bug Categorizes issue or PR as related to a bug.
#7886 opened Nov 7, 2024 by DmitriyLewen v0.58.0
1
@DmitriyLewen
bug(sbom): Trivy overwrites Applications when multiple sbom files contain aggregated language type kind/bug Categorizes issue or PR as related to a bug.
#7851 opened Nov 1, 2024 by DmitriyLewen
refactor(misconf): Remove unused options scan/misconfiguration Issues relating to misconfiguration scanning
#7849 opened Nov 1, 2024 by simar7 v0.58.0
1
@simar7
2
bug(java): We should parse dependencies with unsupported scopes to correctly detect version/skip dependency kind/bug Categorizes issue or PR as related to a bug.
#7844 opened Oct 31, 2024 by DmitriyLewen
License exceptions with a plus sign help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug. scan/license Issues relating to license scanning
#7838 opened Oct 31, 2024 by knqyf263
bug(sbom): Duplicate SBOM packages for multi-module pom.xml files kind/bug Categorizes issue or PR as related to a bug.
#7824 opened Oct 30, 2024 by DmitriyLewen v0.58.0
2
@DmitriyLewen
6
refactor(k8s): add v prefix for Go packages target/kubernetes Issues relating to kubernetes cluster scanning
#7822 opened Oct 30, 2024 by DmitriyLewen v0.58.0
1
@afdesk
feat(java): use remote repositories from settings.xml for pom.xml files help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature.
#7807 opened Oct 29, 2024 by DmitriyLewen
Migrate csaf-poc/csaf_distribution to gocsaf/csaf good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.
#7805 opened Oct 29, 2024 by knqyf263
@thiha-min-thant
8
bug(java): dependOn contains extra dependencies for pom.xml files with modules when using SBOM formats
#7802 opened Oct 28, 2024 by DmitriyLewen v0.58.0
1
@DmitriyLewen
3
chore(k8s): Improve testing for k8s scanner target/kubernetes Issues relating to kubernetes cluster scanning
#7768 opened Oct 19, 2024 by simar7
1
@afdesk
fix(spdx): use hasExtractedLicensingInfos for licenses not in the SPDX license list kind/bug Categorizes issue or PR as related to a bug. scan/license Issues relating to license scanning scan/sbom Issues relating to SBOM
#7721 opened Oct 14, 2024 by DmitriyLewen
1
chore(misconf): Remove Go checks scan/misconfiguration Issues relating to misconfiguration scanning
#7718 opened Oct 11, 2024 by simar7 v0.58.0
@simar7 @nikpivkin
fix(secter): set minimal number of characters for AsymmetricPrivateKey help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug. scan/secret Issues relating to secret scanning
#7700 opened Oct 10, 2024 by DmitriyLewen
2
Trivy should use docker context to select the docker daemon help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature. target/container-image Issues relating to container image scanning
#7686 opened Oct 9, 2024 by knqyf263
feat(python): Add support for astral UV help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/feature Categorizes issue or PR as related to a new feature.
#7653 opened Oct 4, 2024 by knqyf263
feat(misconf): Improve terraform plan JSON error logging kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#7630 opened Oct 2, 2024 by simar7 v0.58.0
1
@simar7 @nikpivkin
1
bug(k8s): Image scanned from "metadata:annotations:kubectl.kubernetes.io/last-applied-configuration" instead of "spec" kind/bug Categorizes issue or PR as related to a bug.
#7573 opened Sep 23, 2024 by afdesk
@afdesk @michaeljsaenz
7
Use and document Trivy JSON report schema version 2 in the Trivy documentation good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/documentation Categorizes issue or PR as related to documentation.
#7553 opened Sep 19, 2024 by knqyf263
@kushal9897
2
enhancement(report): include/exclude dev deps in analyzers
#7476 opened Sep 10, 2024 by DmitriyLewen v0.58.0
1
@DmitriyLewen
12
feat(misconf): Support symlinks in misconfiguration scanning kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#7456 opened Sep 6, 2024 by simar7
2
ProTip! Adding no:label will show everything without a label.