Code

chore: merge changes from upstream#6

Code

Merged

ajkerrigan merged 95 commits intocloud-custodian:maincloud-custodian/trivy:mainfrom albertodonato:merge-upstreamalbertodonato/trivy:merge-upstreamCopy head branch name to clipboardNov 8, 2024

+9,795-6,800

Commits

Commits on Sep 18, 2024

• chore(deps): bump go-ebs-file (aquasecurity#7513)

  Show description for d1d7132
  nikpivkin

  authored
  d1d7132

• fix(sbom): parse type framework as library when unmarshalling CycloneDX files (aquasecurity#7527)

  DmitriyLewen

  authored
  aeb7039

• refactor(misconf): pass options to Rego scanner as is (aquasecurity#7529)

  Show description for dbd2dd6
  nikpivkin

  authored
  dbd2dd6

Commits on Sep 19, 2024

• fix(sbom): export bom-ref when converting a package to a component (aquasecurity#7340)

  Show description for 5dd94eb
  

  3 peopleauthored
  5dd94eb

Commits on Sep 20, 2024

• perf(misconf): use port ranges instead of enumeration (aquasecurity#7549)

  Show description for 1f9fc13
  nikpivkin

  authored
  1f9fc13

Commits on Sep 23, 2024

• fix(misconf): Fixed scope for China Cloud (aquasecurity#7560)

  bloomadcariad

  authored
  37d549e

Commits on Sep 26, 2024

• docs(misconf): Add more info on how to use arbitrary JSON/YAML scan feat (aquasecurity#7458)

  simar7

  authored
  8128ecc

• chore(deps): remove broken replaces for opa and discovery (aquasecurity#7600)

  lebauce

  authored
  bbc8e1d

• ci: cache test images for integration, VM and module tests (aquasecurity#7599)

  DmitriyLewen

  authored
  fea7250

• ci: add workflow_dispatch trigger for test workflow. (aquasecurity#7606)

  DmitriyLewen

  authored
  1fdf30a

• chore(deps): bump the common group across 1 directory with 20 updates (aquasecurity#7604)

  Show description for 3fa24e8
  

  dependabot[bot]

  and

  knqyf263

  authored
  3fa24e8

• fix(db): check DownloadedAt for trivy-java-db (aquasecurity#7592)

  DmitriyLewen

  authored
  13ef3e7

Commits on Sep 27, 2024

• fix: allow access to '..' in mapfs (aquasecurity#7575)

  Show description for a8fbe46
  nikpivkin

  authored
  a8fbe46

• test: use a local registry for remote scanning (aquasecurity#7607)

  Show description for 9baf658
  knqyf263

  authored
  9baf658

Commits on Sep 28, 2024

• fix(misconf): escape all special sequences (aquasecurity#7558)

  Show description for ea0cf03
  nikpivkin

  authored
  ea0cf03

• feat(misconf): add ability to disable checks by ID (aquasecurity#7536)

  Show description for ef0a27d
  

  nikpivkin

  and

  simar7

  authored
  ef0a27d

Commits on Sep 29, 2024

• feat(suse): added SUSE Linux Enterprise Micro support (aquasecurity#7294)

  Show description for efdb68d
  

  msmeissn

  and

  knqyf263

  authored
  efdb68d

Commits on Sep 30, 2024

• fix(misconf): disable DS016 check for image history analyzer (aquasecurity#7540)

  Show description for de40df9
  nikpivkin

  authored
  de40df9

• ci: split save and restore cache actions (aquasecurity#7614)

  DmitriyLewen

  authored
  cb16d43

• refactor: fix auth error handling (aquasecurity#7615)

  Show description for 9d1be41
  knqyf263

  authored
  9d1be41

• feat(secret): enhance secret scanning for python binary files (aquasecurity#7223)

  Show description for 60725f8
  

  afdesk

  and

  knqyf263

  authored
  60725f8

• feat(java): add empty versions if pom.xml dependency versions can't be detected (aquasecurity#7520)

  Show description for b836232
  

  DmitriyLewen

  and

  knqyf263

  authored
  b836232

Commits on Oct 1, 2024

• test: use loaded image names (aquasecurity#7617)

  Show description for d4edeb5
  knqyf263

  authored
  d4edeb5

• ci: don't use cache for setup-go (aquasecurity#7622)

  DmitriyLewen

  authored
  7602d14

• feat: support multiple DB repositories for vulnerability and Java DB (aquasecurity#7605)

  Show description for 3562529
  nikpivkin

  authored
  3562529

Commits on Oct 2, 2024

• feat(misconf): Support --skip-* for all included modules (aquasecurity#7579)

  Show description for c0e8da3
  

  simar7

  and

  nikpivkin

  authored
  c0e8da3

• chore: add prefixes to log messages (aquasecurity#7625)

  Show description for 1faf529
  

  knqyf263

  and

  simar7

  authored
  1faf529

• fix(misconf): Disable deprecated checks by default (aquasecurity#7632)

  simar7

  authored
  82e2adc

• chore(deps): Bump trivy-checks to v1.1.0 (aquasecurity#7631)

  simar7

  authored
  8735242

• fix(secret): change grafana token regex to find them without unquoted (aquasecurity#7627)

  sgaist

  authored
  3e1fa21

• feat: support RPM archives (aquasecurity#7628)

  Show description for 69bf7e0
  knqyf263

  authored
  69bf7e0

Commits on Oct 3, 2024

• fix(misconf): not to warn about missing selectors of libraries (aquasecurity#7638)

  Show description for fcaea74
  nikpivkin

  authored
  fcaea74

• release: v0.56.0 [main] (aquasecurity#7447)

  aqua-bot

  authored
  d246401

• feat(cli): error out when ignore file cannot be found (aquasecurity#7624)

  sgaist

  authored
  cb0b3a9

• fix(db): fix javadb downloading error handling (aquasecurity#7642)

  Show description for 2c87f0c
  nikpivkin

  authored
  2c87f0c

Commits on Oct 7, 2024

• docs(report): Improve SARIF reporting doc (aquasecurity#7655)

  pbaumard

  authored
  ab3a3b2

• fix(report): Fix invalid URI in SARIF report (aquasecurity#7645)

  Show description for 015bb88
  

  pbaumard

  and

  DmitriyLewen

  authored
  015bb88

• fix(redhat): include arch in PURL qualifiers (aquasecurity#7654)

  Show description for a585e95
  knqyf263

  authored
  a585e95

Commits on Oct 8, 2024

• fix(repo): git clone output to Stderr (aquasecurity#7561)

  dangogh

  authored
  fdf203c

• docs(report): fix reporting doc format (aquasecurity#7671)

  pbaumard

  authored
  55b5a7e

Commits on Oct 9, 2024

• fix(sbom): add options for DBs in private registries (aquasecurity#7660)

  Show description for 1f2e91b
  knqyf263

  authored
  1f2e91b

• feat(cli): add trivy auth (aquasecurity#7664)

  Show description for 27117f8
  

  knqyf263

  and

  DmitriyLewen

  authored
  27117f8

Commits on Oct 10, 2024

• fix(cli): clean --all deletes only relevant dirs (aquasecurity#7704)

  Show description for 672e886
  knqyf263

  authored
  672e886

Commits on Oct 11, 2024

• refactor(misconf): introduce generic scanner (aquasecurity#7515)

  Show description for c78f45b
  nikpivkin

  authored
  c78f45b

Commits on Oct 14, 2024

• docs: apt-transport-https is a transitional package (aquasecurity#7678)

  Show description for 31aa20a
  simondeziel

  authored
  31aa20a

Commits on Oct 15, 2024

• feat(cli): rename trivy auth to trivy registry (aquasecurity#7727)

  Show description for 633a7ab
  knqyf263

  authored
  633a7ab

Commits on Oct 16, 2024

• feat(misconf): public network support for Azure Storage Account (aquasecurity#7601)

  Show description for ad91412
  nikpivkin

  authored
  ad91412

• docs: add note about disabled DS016 check (aquasecurity#7724)

  Show description for 83e5b83
  nikpivkin

  authored
  83e5b83

• test: define constants for test images (aquasecurity#7739)

  Show description for bcfc37b
  

  knqyf263

  and

  DmitriyLewen

  authored
  bcfc37b

Commits on Oct 17, 2024

• feat(misconf): ssl_mode support for GCP SQL DB instance (aquasecurity#7564)

  Show description for 2eaa17e
  nikpivkin

  authored
  2eaa17e

• fix(misconf): change default ACL of digitalocean_spaces_bucket to private (aquasecurity#7577)

  Show description for 9da84f5
  nikpivkin

  authored
  9da84f5

• fix(misconf): check if property is not nil before conversion (aquasecurity#7578)

  Show description for c8c14d3
  nikpivkin

  authored
  c8c14d3

• fix(java): correctly inherit version and scope from upper/root depManagement and dependencies into parents (aquasecurity#7541)

  Show description for 778df82
  

  DmitriyLewen

  and

  knqyf263

  authored
  778df82

• test: use forked images (aquasecurity#7755)

  Show description for 922949a
  knqyf263

  authored
  922949a

• feat(parser): ignore white space in pom.xml files (aquasecurity#7747)

  Show description for a7baa93
  sgaist

  authored
  a7baa93

• refactor(misconf): simplify k8s scanner (aquasecurity#7717)

  Show description for cd44bb4
  nikpivkin

  authored
  cd44bb4

Commits on Oct 18, 2024

• fix(misconf): fix for Azure Storage Account network acls adaptation (aquasecurity#7602)

  Show description for 35fd018
  nikpivkin

  authored
  35fd018

• feat(cyclonedx): add file checksums to CycloneDX reports (aquasecurity#7507)

  Show description for c225883
  

  Churro

  and

  knqyf263

  authored
  c225883

Commits on Oct 19, 2024

• fix(misconf): properly expand dynamic blocks (aquasecurity#7612)

  Show description for 8d5dbc9
  

  nikpivkin

  and

  simar7

  authored
  8d5dbc9

Commits on Oct 21, 2024

• fix: enable usestdlibvars linter (aquasecurity#7770)

  Show description for 57e24aa
  mmorel-35

  authored
  57e24aa

• fix(license): fix license normalization for Universal Permissive License (aquasecurity#7766)

  pbaumard

  authored
  f6acdf7

• refactor(k8s): scan config files as a folder (aquasecurity#7690)

  afdesk

  authored
  010b213

• feat(misconf): export unresolvable field of IaC types to Rego (aquasecurity#7765)

  Show description for 9514148
  nikpivkin

  authored
  9514148

Commits on Oct 23, 2024

• feat(misconf): Show misconfig ID in output (aquasecurity#7762)

  simar7

  authored
  f75c0d1

Commits on Oct 24, 2024

• feat(report): update gitlab template to populate operating_system value (aquasecurity#7735)

  aarongoldenthal

  authored
  c0d79fa

Commits on Oct 25, 2024

• feat: add end of life date for Ubuntu 24.10 (aquasecurity#7787)

  itsdean

  authored
  ad3c09e

• ci(helm): auto public Helm chart after PR merged (aquasecurity#7526)

  afdesk

  authored
  a16b830

Commits on Oct 28, 2024

• docs: add Windows install instructions (aquasecurity#7800)

  okamototk

  authored
  63dd3d6

Commits on Oct 29, 2024

• fix(k8s): support kubernetes v1.31 (aquasecurity#7810)

  afdesk

  authored
  7a4f4d8

• fix(k8s)!: support k8s multi container (aquasecurity#7444)

  Show description for c434775
  

  smtan-gl

  and

  afdesk

  authored
  c434775

• refactor(misconf): Deprecate EXCEPTIONS for misconfiguration scanning (aquasecurity#7776)

  Show description for c70b6fa
  simar7

  authored
  c70b6fa

• fix(helm): properly handle multiple archived dependencies (aquasecurity#7782)

  Show description for 6fab88d
  nikpivkin

  authored
  6fab88d

Commits on Oct 30, 2024

• fix(cli): add config name to skip-policy-update alias (aquasecurity#7820)

  Show description for b661d68
  nikpivkin

  authored
  b661d68

• fix(sbom): use Annotation instead of AttributionTexts for SPDX formats (aquasecurity#7811)

  DmitriyLewen

  authored
  f2bb9c6

Commits on Oct 31, 2024

• fix(k8s): skip resources without misconfigs (aquasecurity#7797)

  afdesk

  authored
  7882776

• fix(go): Do not trim v prefix from versions in Go Mod Analyzer (aquasecurity#7733)

  Show description for e872ec0
  

  Rutam21

  and

  DmitriyLewen

  authored
  e872ec0

• chore(deps): Bump trivy-checks (aquasecurity#7819)

  simar7

  authored
  194d4ab

• docs: add example of creating whitelist of checks (aquasecurity#7821)

  Show description for 7654b2e
  nikpivkin

  authored
  7654b2e

• docs(java): add info about supported scopes (aquasecurity#7842)

  DmitriyLewen

  authored
  dc44946

• feat(db): append errors (aquasecurity#7843)

  Show description for 5e78b6c
  knqyf263

  authored
  5e78b6c

• chore: lint errors.Join (aquasecurity#7845)

  Show description for 7632625
  knqyf263

  authored
  7632625

Commits on Nov 1, 2024

• release: v0.57.0 [main] (aquasecurity#7710)

  aqua-bot

  authored
  efec326

Commits on Nov 4, 2024

• chore: bump golangci-lint to v1.61.0 (aquasecurity#7853)

  Show description for 4da59bd
  knqyf263

  authored
  4da59bd

• chore(deps): bump the github-actions group across 1 directory with 2 updates (aquasecurity#7854)

  Show description for a9b557d
  dependabot[bot]

  authored
  a9b557d

• test: save containerd image into archive and use in tests (aquasecurity#7816)

  DmitriyLewen

  authored
  a6a45b3

Commits on Nov 5, 2024

• refactor(secret): optimize performance by moving ToLower operation outside loop (aquasecurity#7862)

  Yeatesss

  authored
  2529b58

• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (aquasecurity#7868)

  Show description for ed2288f
  dependabot[bot]

  authored
  ed2288f

• feat(k8s): add default commands for unknown platform (aquasecurity#7863)

  afdesk

  authored
  b1c7f55

Commits on Nov 6, 2024

• fix: Improve version comparisons when build identifiers are present (aquasecurity#7873)

  bpfoster

  authored
  eda4d76

• chore: bump containerd to v2.0.0 (aquasecurity#7875)

  Show description for 6e3252b
  knqyf263

  authored
  6e3252b

• chore(deps): bump the common group across 1 directory with 20 updates (aquasecurity#7876)

  Show description for 6018461
  

  dependabot[bot]

  and

  knqyf263

  authored
  6018461

Commits on Nov 7, 2024

• fix(fs): add missing defered Cleanup() call to post analyzer fs (aquasecurity#7882)

  jinroh

  authored
  ab32297

Commits on Nov 8, 2024

• fix(misconf): handle null properties in CloudFormation templates (aquasecurity#7813)

  Show description for 99b2db3
  nikpivkin

  authored
  99b2db3

• fix(terraform): set null value as fallback for missing variables (aquasecurity#7669)

  albertodonato

  authored
  611558e

• Merge upstream main to get latest changes

  albertodonato

  committed
  ee932cd