v0.32.0

aquasecurity/trivy

版本发布时间: 2022-09-16 22:16:01

aquasecurity/trivy最新发布版本:v0.50.4(2024-04-24 20:34:06)

Changelog

585985ed docs: add Rekor SBOM attestation scanning (#2893)
d30fa00a chore: narrow the owner scope (#2894)
38c1513a fix: remove a patch number from the recommendation link (#2891)
ba29ce64 fix: enable parsing of UUID-only rekor entry ID (#2887)
018eda61 docs(sbom): add SPDX scanning (#2885)
20f1e599 docs: restructure docs and add tutorials (#2883)
192fd78c feat(sbom): scan sbom attestation in the rekor record (#2699)
597836c3 feat(k8s): support outdated-api (#2877)
6c7bd67c chore(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#2815)
41270434 fix(c): support revisions in Conan parser (#2878)
b677d7e2 feat: dynamic links support for scan results (#2838)
8e03bbb4 chore(deps): bump go.uber.org/zap from 1.22.0 to 1.23.0 (#2818)
27005c7d docs: update archlinux commands (#2876)
b6e394dc feat(secret): add line from dockerfile where secret was added to secret result (#2780)
9f6680a1 feat(sbom): Add unmarshal for spdx (#2868)
db0aaf18 chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#2827)
bb3220c3 fix: revert asff arn and add documentation (#2852)
c51f2b82 docs: batch-import-findings limit (#2851)
552732b5 chore(deps): bump golang from 1.19.0 to 1.19.1 (#2872)
3165c376 feat(sbom): Add marshal for spdx (#2867)
dac2b4a2 build: checkout before setting up Go (#2873)
39f83afe chore: bump Go to 1.19 (#2861)
0ce95830 docs: azure doc and trivy (#2869)
2f379616 fix: Scan tarr'd dependencies (#2857)
db14ef3c chore(helm): helm test with ingress (#2630)
acb65d56 feat(report): add secrets to sarif format (#2820)
a18cd7c0 chore(deps): bump azure/setup-helm from 1.1 to 3.3 (#2807)
2de903ca refactor: add a new interface for initializing analyzers (#2835)
63c3b8ed chore(deps): bump github.com/aws/aws-sdk-go from 1.44.77 to 1.44.92 (#2840)
6717665a fix: update ProductArn with account id (#2782)
41a84967 feat(helm): make cache TTL configurable (#2798)
0f1f2c1b build(): Sign releaser artifacts, not only container manifests (#2789)
b389a6f4 chore: improve doc about azure devops (#2795)
9ef9fce5 chore(deps): bump sigstore/cosign-installer from 2.5.0 to 2.5.1 (#2804)
7b3225d0 chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.16.11 to 1.16.14 (#2828)
37733edc chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#2825)
44d7e8dd docs: don't push patch versions (#2824)
4839075c feat: add support for conan.lock file (#2779)
6b4ddaae feat: cache merged layers
a18f398a chore(deps): bump helm/chart-testing-action from 2.2.1 to 2.3.0 (#2805)
4dcce140 chore(deps): bump actions/cache from 3.0.5 to 3.0.8 (#2806)
db454471 chore(deps): bump github.com/caarlos0/env/v6 from 6.9.3 to 6.10.0 (#2811)
a246d0f2 chore(deps): bump github.com/aquasecurity/table from 1.7.2 to 1.8.0 (#2810)
1800017a chore(deps): bump github.com/samber/lo from 1.27.0 to 1.27.1 (#2808)
218e41a4 chore(deps): bump github.com/alicebob/miniredis/v2 from 2.22.0 to 2.23.0 (#2814)
a000adee feat: add support for gradle.lockfile (#2759)
43113bc0 chore(mod): updates wazero to 1.0.0-pre.1 #2791
5f0bf144 feat: move file patterns to a global level to be able to use it on any analyzer (#2539)
2580ea15 Fix url validaton failures (#2783)
2473b2c8 fix(image): add logic to detect empty layers (#2790)
9d018d44 feat(rust): add dependency graph from Rust binaries (#2771)