v0.46.0

aquasecurity/trivy

版本发布时间: 2023-10-14 23:14:05

aquasecurity/trivy最新发布版本:v0.54.1(2024-08-01 00:45:52)

⚡Release highlights and summary⚡

👉 https://github.com/aquasecurity/trivy/discussions/5377

Changelog

cbbd1ce1f feat(k8s): add support for vulnerability detection (#5268)
24a0d9214 fix(python): override BOM in requirements.txt files (#5375)
0c3e2f08b docs: add kbom documentation (#5363)
6c12f0428 test: use maximize build space for VM tests (#5362)
c4134224a chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365)
20ab7033b fix(report): add escaping quotes in misconfig Title for asff template (#5351)
91841f59b ci: add workflow to check Go versions of dependencies (#5340)
57ba05c76 chore(deps): Upgrade defsec to v0.93.1 (#5348)
fef3ed435 chore(deps): bump alpine from 3.18.3 to 3.18.4 (#5300)
ced54aced fix: Report error when os.CreateTemp fails (to be consistent with other uses) (#5342)
2798df916 fix: add config files to FS for post-analyzers (#5333)
af485b33f fix: fix MIME warnings after updating to Go 1.20 (#5336)
008babfb8 build: fix a compile error with Go 1.21 (#5339)
00d9c4666 feat: added Metadata into the k8s resource's scan report (#5322)
03b6787c4 ci: check only PR's in actions/stale (#5337)
e6d5889ed chore: update adopters template (#5330)
74dbd8a1f ci: do not trigger tests on the push event (#5313)
393bfdc1a fix(sbom): use PURL or Group and Name in case of Java (#5154)
76eb8a57b docs: add buildkite repository to ecosystem page (#5316)
6c74ee11f chore(deps): bump docker/setup-qemu-action from 2 to 3 (#5290)
6119878de chore(deps): bump docker/setup-buildx-action from 2 to 3 (#5292)
a346587b8 chore(deps): bump actions/cache from 3.3.1 to 3.3.2 (#5293)
7e613cc5f chore(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#5286)
f05bc4be4 chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.2 (#5289)
3be5e6b24 chore: enable go-critic (#5302)
f6cd21c87 chore(deps): bump actions/checkout from 3.6.0 to 4.1.0 (#5288)
f7b975187 chore(deps): bump github.com/aws/aws-sdk-go from 1.45.3 to 1.45.19 (#5287)
18d168769 close java-db client (#5273)
eb60e9f3c chore(deps): bump docker/login-action from 2 to 3 (#5291)
5a92055e1 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#5294)
46afe65ee chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304)
0bf2a11a2 chore(deps): bump github.com/opencontainers/image-spec (#5295)
23b5fece0 fix(report): removes git::http from uri in sarif (#5244)
4f1d576e5 Improve the meaning of sentence (#5301)
6ab2bdfa7 chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.2.2 (#5297)
4217cffb5 chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#5296)
184058470 add app nil check (#5274)
c5ae9f265 typo: in secret.md (#5281)
562723f0a docs: add info about github format (#5265)
3dd5b1e94 feat(dotnet): add license support for NuGet (#5217)
5c18475f3 docs: correctly export variables (#5260)
0c08dde01 chore: Add line numbers for lint output (#5247)
0ccbb4f7f chore(cli): disable java-db flags in server mode (#5263)
908a4914c feat(db): allow passing registry options (#5226)
5b4652d79 chore(deps): Bump up defsec to v0.93.0 (#5253)
faf8d49c4 refactor(purl): use TypeApk from purl (#5232)
559c0f30b chore: enable more linters (#5228)
2baad4618 ci: bump GoReleaser from 1.16.2 to 1.20.0 (#5236)
df2bff9f5 Fix typo on ide.md (#5239)
44656f285 refactor: use defined types (#5225)
37af52994 fix(purl): skip local Go packages (#5190)
eea3320d8 docs: update info about license scanning in Yarn projects (#5207)
2e6662060 ci: auto apply labels (#5200)
49680dc88 fix link (#5203)