Repository navigation
aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote PEP 751: Trivy silently drops valid name-only dependency relationships from pylock.toml
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote CloudFormation: API Gateway checks miss resources and stages, and findings can vary between scans
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Exit 0 and no warning when no OS packages are detected, so --exit-code gates pass images Trivy could not read
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Enhance the HTML report table
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote -
You must be logged in to vote CycloneDX VEX: a second vulnerability object for the same ID overrides the first, and local
kind/bugbom-refaffects are ignoredCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy classifies production pnpm workspace dependencies in pnpm deploy lockfiles as dev dependencies
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote OpenVEX statements whose product is the SBOM root component are ignored by
kind/bugtrivy sbomfor packages of other ecosystemsCategorizes issue or PR as related to a bug. -
You must be logged in to vote When resolving Terraform modules from registry, Trivy does not utilize remote service discovery
kind/featureCategorizes issue or PR as related to a new feature. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Trivy does not correctly handle golang pseudo-versions.
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote Inconsistent vulnerability data for Ubuntu
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote SPDX 3?
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Support
kind/featuretopologySpreadConstraintsin the Trivy Helm chartCategorizes issue or PR as related to a new feature. target/kubernetesIssues relating to kubernetes cluster scanning -
You must be logged in to vote gomod fs scanner reports false positive vulnerabilities when scanning Go module cache directories (.cache/pkg/mod/)
scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning target/repositoryIssues relating to VCS repository scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote VEX not_affected statements are ignored for OS packages whose dependency path contains a cycle (e.g. git <-> perl-Git)
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Non-deterministic purl for Wolfi packages discovered via
kind/bug/var/lib/db/sbom(two apk components per SPDX document)Categorizes issue or PR as related to a bug. -
You must be logged in to vote Encountering 429 on Maven Central when analyzing Gradle project
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote
kind/bug--vexrejects valid CSAF 2.0 documents that declareproduct_tree.product_groupsCategorizes issue or PR as related to a bug. -
You must be logged in to vote
