Code

Update Trivy to version 0.56.2#4

Code

Merged

fhielpos merged 127 commits intogs-releasesgiantswarm/trivy-upstream:gs-releasesfrom update-0.56.2giantswarm/trivy-upstream:update-0.56.2Copy head branch name to clipboardDec 20, 2024

+13,966-6,887

Commits

Commits on Jul 31, 2024

• feat(vm): Support direct filesystem (aquasecurity#7058)

  Show description for 45b3f34
  yusuke-koyoshi

  authored
  45b3f34

• feat(cli)!: delete deprecated SBOM flags (aquasecurity#7266)

  Show description for 7024572
  knqyf263

  authored
  7024572

• feat(vm): support the Ext2/Ext3 filesystems (aquasecurity#6983)

  

  Aruneko

  authored
  35c60f0

• fix(plugin): do not call GitHub content API for releases and tags (aquasecurity#7274)

  Show description for b3ee6da
  knqyf263

  authored
  b3ee6da

• fix(java): Return error when trying to find a remote pom to avoid segfault (aquasecurity#7275)

  Show description for 49d5270
  

  coheigea

  and

  DmitriyLewen

  authored
  49d5270

• fix(flag): incorrect behavior for deprected flag --clear-cache (aquasecurity#7281)

  afdesk

  authored
  2a0e529

Commits on Aug 2, 2024

• refactor(misconf): remove file filtering from parsers (aquasecurity#7289)

  Show description for e95152f
  nikpivkin

  authored
  e95152f

• feat(vuln): Add --detection-priority flag for accuracy tuning (aquasecurity#7288)

  Show description for fd8348d
  knqyf263

  authored
  fd8348d

Commits on Aug 5, 2024

• docs: add auto-generated config (aquasecurity#7261)

  Show description for 555ac8c
  

  afdesk

  and

  knqyf263

  authored
  555ac8c

Commits on Aug 6, 2024

• fix(terraform): add aws_region name to presets (aquasecurity#7184)

  albertodonato

  authored
  bb2e26a

• perf(misconf): do not convert contents of a YAML file to string (aquasecurity#7292)

  Show description for 85dadf5
  nikpivkin

  authored
  85dadf5

• refactor(misconf): remove unused universal scanner (aquasecurity#7293)

  Show description for 13789b7
  nikpivkin

  authored
  13789b7

• perf(misconf): use json.Valid to check validity of JSON (aquasecurity#7308)

  Show description for c766831
  nikpivkin

  authored
  c766831

• fix(misconf): load only submodule if it is specified in source (aquasecurity#7112)

  Show description for a4180bd
  nikpivkin

  authored
  a4180bd

• feat(misconf): support for policy and bucket grants (aquasecurity#7284)

  Show description for a817fae
  nikpivkin

  authored
  a817fae

Commits on Aug 7, 2024

• fix(misconf): do not set default value for default_cache_behavior (aquasecurity#7234)

  Show description for f0ed5e4
  nikpivkin

  authored
  f0ed5e4

• feat(misconf): iterator argument support for dynamic blocks (aquasecurity#7236)

  Show description for fe92072
  

  nikpivkin

  and

  simar7

  authored
  fe92072

• chore(deps): bump the common group across 1 directory with 7 updates (aquasecurity#7305)

  Show description for ac3eb9d
  dependabot[bot]

  authored
  ac3eb9d

• docs: update client/server docs for misconf and license scanning (aquasecurity#7277)

  Show description for 7278abd
  

  nikpivkin

  and

  knqyf263

  authored
  7278abd

Commits on Aug 8, 2024

• docs: update links to packaging.python.org (aquasecurity#7318)

  Show description for 65d991c
  nikpivkin

  authored
  65d991c

• perf(misconf): optimize work with context (aquasecurity#6968)

  Show description for 2b6d8d9
  nikpivkin

  authored
  2b6d8d9

Commits on Aug 9, 2024

• refactor: replace ftypes.Gradle with packageurl.TypeGradle (aquasecurity#7323)

  Show description for 59c1541
  nikpivkin

  authored
  59c1541

• docs: update air-gapped docs (aquasecurity#7160)

  Show description for 08cc14b
  

  itaysk

  and

  knqyf263

  authored
  08cc14b

Commits on Aug 14, 2024

• docs(misconf): Update callsites to use correct naming (aquasecurity#7335)

  simar7

  authored
  ee339b5

Commits on Aug 15, 2024

• chore(deps): bump the common group with 9 updates (aquasecurity#7333)

  Show description for 0047dbf
  dependabot[bot]

  authored
  0047dbf

• fix(misconf): change default TLS values for the Azure storage account (aquasecurity#7345)

  Show description for aadb090
  nikpivkin

  authored
  aadb090

• refactor(misconf): highlight only affected rows (aquasecurity#7310)

  Show description for 0c6687d
  nikpivkin

  authored
  0c6687d

Commits on Aug 20, 2024

• fix(misconf): wrap Azure PortRange in iac types (aquasecurity#7357)

  Show description for c5c62d5
  nikpivkin

  authored
  c5c62d5

• feat(misconf): scanning support for YAML and JSON (aquasecurity#7311)

  Show description for efdbd8f
  nikpivkin

  authored
  efdbd8f

Commits on Aug 21, 2024

• feat(misconf): variable support for Terraform Plan (aquasecurity#7228)

  Show description for db2c955
  nikpivkin

  authored
  db2c955

• fix: safely check if the directory exists (aquasecurity#7353)

  Show description for 05a8297
  nikpivkin

  authored
  05a8297

• chore(deps): bump the aws group across 1 directory with 7 updates (aquasecurity#7358)

  Show description for 3f0e7eb
  dependabot[bot]

  authored
  3f0e7eb

• feat(server): add internal --path-prefix flag for client/server mode (aquasecurity#7321)

  Show description for 24a4563
  knqyf263

  authored
  24a4563

Commits on Aug 22, 2024

• chore(deps): bump trivy-checks (aquasecurity#7350)

  Show description for 6fe6727
  nikpivkin

  authored
  6fe6727

Commits on Aug 23, 2024

• refactor(misconf): use slog (aquasecurity#7295)

  Show description for bfdf5cf
  nikpivkin

  authored
  bfdf5cf

• feat(misconf): ignore duplicate checks (aquasecurity#7317)

  Show description for 9ef05fc
  nikpivkin

  authored
  9ef05fc

• fix(misconf): init frameworks before updating them (aquasecurity#7376)

  Show description for b65b32d
  nikpivkin

  authored
  b65b32d

• fix(misconf): support deprecating for Go checks (aquasecurity#7377)

  Show description for 2a6c7ab
  nikpivkin

  authored
  2a6c7ab

Commits on Aug 24, 2024

• feat(python): use minimum version for pip packages (aquasecurity#7348)

  afdesk

  authored
  e9b43f8

• docs: add pkg flags to config file page (aquasecurity#7370)

  DmitriyLewen

  authored
  45a9627

Commits on Aug 27, 2024

• feat(misconf): Add support for using spec from on-disk bundle (aquasecurity#7179)

  simar7

  authored
  be86126

• fix(report): escape Message field in asff.tpl template (aquasecurity#7401)

  DmitriyLewen

  authored
  dd9733e

• fix(misconf): use module to log when metadata retrieval fails (aquasecurity#7405)

  Show description for 0799770
  nikpivkin

  authored
  0799770

Commits on Aug 28, 2024

• feat(misconf): support for ignore by nested attributes (aquasecurity#7205)

  Show description for 44e4686
  nikpivkin

  authored
  44e4686

• fix(misconf): do not filter Terraform plan JSON by name (aquasecurity#7406)

  Show description for 9d7264a
  nikpivkin

  authored
  9d7264a

Commits on Aug 29, 2024

• feat(misconf): port and protocol support for EC2 networks (aquasecurity#7146)

  Show description for 98e136e
  nikpivkin

  authored
  98e136e

• chore: fix allow rule of ignoring test files to make it case insensitive (aquasecurity#7415)

  aasish-r

  authored
  344dafd

• fix(secret): use only line with secret for long secret lines (aquasecurity#7412)

  DmitriyLewen

  authored
  391448a

• chore: update CODEOWNERS (aquasecurity#7398)

  Show description for 84118d0
  knqyf263

  authored
  84118d0

• feat(server): Make Trivy Server Multiplexer Exported (aquasecurity#7389)

  orizerah

  authored
  4c6e8ca

• feat(report): export modified findings in JSON (aquasecurity#7383)

  Show description for 7aea79d
  knqyf263

  authored
  7aea79d

• fix(sbom): use NOASSERTION for licenses fields in SPDX formats (aquasecurity#7403)

  DmitriyLewen

  authored
  c96dcdd

• fix(misconf): do not register Rego libs in checks registry (aquasecurity#7420)

  Show description for a5aa63e
  nikpivkin

  authored
  a5aa63e

Commits on Aug 30, 2024

• chore(deps): Bump trivy-checks (aquasecurity#7417)

  Show description for 39c8024
  

  simar7

  and

  nikpivkin

  authored
  39c8024

• fix(misconf): do not recreate filesystem map (aquasecurity#7416)

  Show description for 3a5d091
  nikpivkin

  authored
  3a5d091

• fix(secret): use .eyJ keyword for JWT secret (aquasecurity#7410)

  DmitriyLewen

  authored
  bf64003

Commits on Aug 31, 2024

• fix(misconf): fix infer type for null value (aquasecurity#7424)

  Show description for 0cac3ac
  nikpivkin

  authored
  0cac3ac

Commits on Sep 2, 2024

• fix(aws): handle ECR repositories in different regions (aquasecurity#6217)

  Show description for feaef96
  knrc

  authored
  feaef96

• fix: logger initialization before flags parsing (aquasecurity#7372)

  Show description for c929290
  

  DmitriyLewen

  and

  knqyf263

  authored
  c929290

• fix(nodejs): check all importers to detect dev deps from pnpm-lock.yaml file (aquasecurity#7387)

  DmitriyLewen

  authored
  fd9ed3a

• test: add integration plugin tests (aquasecurity#7299)

  DmitriyLewen

  authored
  1a6295c

Commits on Sep 3, 2024

• feat(sbom): set User-Agent header on requests to Rekor (aquasecurity#7396)

  Show description for af1d257
  bobcallaway

  authored
  af1d257

• fix(helm): explicitly define kind and apiVersion of volumeClaimTemplate element (aquasecurity#7362)

  LucasVanHaaren

  authored
  da4ebfa

• chore(deps): Bump trivy-checks and pin OPA (aquasecurity#7427)

  Show description for 870523d
  

  simar7

  and

  nikpivkin

  authored
  870523d

• feat(java): add test scope support for pom.xml files (aquasecurity#7414)

  DmitriyLewen

  authored
  2d97700

• fix(license): add license handling to JUnit template (aquasecurity#7409)

  psibre

  authored
  f80183c

• feat(go): use toolchain as stdlib version for go.mod files (aquasecurity#7163)

  DmitriyLewen

  authored
  2d80769

• release: v0.55.0 [main] (aquasecurity#7271)

  aqua-bot

  authored
  7a1e8b8

Commits on Sep 5, 2024

• fix(license): stop spliting a long license text (aquasecurity#7336)

  Show description for 4926da7
  

  afdesk

  and

  knqyf263

  authored
  4926da7

Commits on Sep 6, 2024

• refactor(java): add error/statusCode for logs when we can't get pom.xml/maven-metadata.xml from remote repo (aquasecurity#7451)

  DmitriyLewen

  authored
  412fb76

• chore(helm): bump up Trivy Helm chart (aquasecurity#7441)

  afdesk

  authored
  e2118e8

• chore(deps): bump the common group across 1 directory with 19 updates (aquasecurity#7436)

  Show description for 5375cd2
  

  dependabot[bot]

  and

  knqyf263

  authored
  5375cd2

Commits on Sep 10, 2024

• chore(deps): bump the aws group with 6 updates (aquasecurity#7468)

  Show description for 3642fe1
  dependabot[bot]

  authored
  3642fe1

• fix(oracle): Update EOL date for Oracle 7 (aquasecurity#7480)

  s-reddy1498

  authored
  dd0a64a

Commits on Sep 11, 2024

• fix(report): change a receiver of MarshalJSON (aquasecurity#7483)

  Show description for 927c6e0
  knqyf263

  authored
  927c6e0

• fix(report): fix error with unmarshal of ExperimentalModifiedFindings (aquasecurity#7463)

  Show description for 7ff9aff
  

  DmitriyLewen

  and

  knqyf263

  authored
  7ff9aff

• docs(oci): Add a note About the expected Media Type for the Trivy-DB OCI Artifact (aquasecurity#7449)

  Squiddim

  authored
  d589856

• feat(license): improve license normalization (aquasecurity#7131)

  Show description for 6472e3c
  

  3 peopleauthored
  6472e3c

• docs(db): add a manifest example (aquasecurity#7485)

  Show description for 8876e70
  knqyf263

  authored
  8876e70

Commits on Sep 12, 2024

• revert(java): stop supporting of test scope for pom.xml files (aquasecurity#7488)

  DmitriyLewen

  authored
  b0222fe

• docs: refine go docs (aquasecurity#7442)

  Show description for 04a854c
  

  itaysk

  and

  knqyf263

  authored
  04a854c

Commits on Sep 16, 2024

• chore(vex): suppress openssl vulnerabilities (aquasecurity#7500)

  Show description for 42748c4
  knqyf263

  authored
  42748c4

• chore(deps): bump alpine from 3.20.0 to 3.20.3 (aquasecurity#7508)

  kaplanlior

  authored
  701dbda

• chore(vex): add CVE-2024-34155, CVE-2024-34156 and CVE-2024-34158 in trivy.openvex.json (aquasecurity#7510)

  DmitriyLewen

  authored
  0efd202

• fix(java): use dependencyManagement from root/child pom's for dependencies from parents (aquasecurity#7497)

  DmitriyLewen

  authored
  5442949

• refactor: split .egg and packaging analyzers (aquasecurity#7514)

  DmitriyLewen

  authored
  e6f45cd

Commits on Sep 17, 2024

• feat(misconf): Register checks only when needed (aquasecurity#7435)

  simar7

  authored
  f768d3a

• fix(misconf): Fix logging typo (aquasecurity#7473)

  simar7

  authored
  56db43c

Commits on Sep 18, 2024

• chore(deps): bump go-ebs-file (aquasecurity#7513)

  Show description for d1d7132
  nikpivkin

  authored
  d1d7132

• fix(sbom): parse type framework as library when unmarshalling CycloneDX files (aquasecurity#7527)

  DmitriyLewen

  authored
  aeb7039

• refactor(misconf): pass options to Rego scanner as is (aquasecurity#7529)

  Show description for dbd2dd6
  nikpivkin

  authored
  dbd2dd6

Commits on Sep 19, 2024

• fix(sbom): export bom-ref when converting a package to a component (aquasecurity#7340)

  Show description for 5dd94eb
  

  3 peopleauthored
  5dd94eb

Commits on Sep 20, 2024

• perf(misconf): use port ranges instead of enumeration (aquasecurity#7549)

  Show description for 1f9fc13
  nikpivkin

  authored
  1f9fc13

Commits on Sep 23, 2024

• fix(misconf): Fixed scope for China Cloud (aquasecurity#7560)

  bloomadcariad

  authored
  37d549e

Commits on Sep 26, 2024

• docs(misconf): Add more info on how to use arbitrary JSON/YAML scan feat (aquasecurity#7458)

  simar7

  authored
  8128ecc

• chore(deps): remove broken replaces for opa and discovery (aquasecurity#7600)

  lebauce

  authored
  bbc8e1d

• ci: cache test images for integration, VM and module tests (aquasecurity#7599)

  DmitriyLewen

  authored
  fea7250

• ci: add workflow_dispatch trigger for test workflow. (aquasecurity#7606)

  DmitriyLewen

  authored
  1fdf30a

• chore(deps): bump the common group across 1 directory with 20 updates (aquasecurity#7604)

  Show description for 3fa24e8
  

  dependabot[bot]

  and

  knqyf263

  authored
  3fa24e8

• fix(db): check DownloadedAt for trivy-java-db (aquasecurity#7592)

  DmitriyLewen

  authored
  13ef3e7

Commits on Sep 27, 2024

• fix: allow access to '..' in mapfs (aquasecurity#7575)

  Show description for a8fbe46
  nikpivkin

  authored
  a8fbe46

• test: use a local registry for remote scanning (aquasecurity#7607)

  Show description for 9baf658
  knqyf263

  authored
  9baf658

Commits on Sep 28, 2024

• fix(misconf): escape all special sequences (aquasecurity#7558)

  Show description for ea0cf03
  nikpivkin

  authored
  ea0cf03

• feat(misconf): add ability to disable checks by ID (aquasecurity#7536)

  Show description for ef0a27d
  

  nikpivkin

  and

  simar7

  authored
  ef0a27d

Commits on Sep 29, 2024

• feat(suse): added SUSE Linux Enterprise Micro support (aquasecurity#7294)

  Show description for efdb68d
  

  msmeissn

  and

  knqyf263

  authored
  efdb68d

Commits on Sep 30, 2024

• fix(misconf): disable DS016 check for image history analyzer (aquasecurity#7540)

  Show description for de40df9
  nikpivkin

  authored
  de40df9

• ci: split save and restore cache actions (aquasecurity#7614)

  DmitriyLewen

  authored
  cb16d43

• refactor: fix auth error handling (aquasecurity#7615)

  Show description for 9d1be41
  knqyf263

  authored
  9d1be41

• feat(secret): enhance secret scanning for python binary files (aquasecurity#7223)

  Show description for 60725f8
  

  afdesk

  and

  knqyf263

  authored
  60725f8

• feat(java): add empty versions if pom.xml dependency versions can't be detected (aquasecurity#7520)

  Show description for b836232
  

  DmitriyLewen

  and

  knqyf263

  authored
  b836232

Commits on Oct 1, 2024

• test: use loaded image names (aquasecurity#7617)

  Show description for d4edeb5
  knqyf263

  authored
  d4edeb5

• ci: don't use cache for setup-go (aquasecurity#7622)

  DmitriyLewen

  authored
  7602d14

• feat: support multiple DB repositories for vulnerability and Java DB (aquasecurity#7605)

  Show description for 3562529
  nikpivkin

  authored
  3562529

Commits on Oct 2, 2024

• feat(misconf): Support --skip-* for all included modules (aquasecurity#7579)

  Show description for c0e8da3
  

  simar7

  and

  nikpivkin

  authored
  c0e8da3

• chore: add prefixes to log messages (aquasecurity#7625)

  Show description for 1faf529
  

  knqyf263

  and

  simar7

  authored
  1faf529

• fix(misconf): Disable deprecated checks by default (aquasecurity#7632)

  simar7

  authored
  82e2adc

• chore(deps): Bump trivy-checks to v1.1.0 (aquasecurity#7631)

  simar7

  authored
  8735242

• fix(secret): change grafana token regex to find them without unquoted (aquasecurity#7627)

  sgaist

  authored
  3e1fa21

• feat: support RPM archives (aquasecurity#7628)

  Show description for 69bf7e0
  knqyf263

  authored
  69bf7e0

Commits on Oct 3, 2024

• fix(misconf): not to warn about missing selectors of libraries (aquasecurity#7638)

  Show description for fcaea74
  nikpivkin

  authored
  fcaea74

• release: v0.56.0 [main] (aquasecurity#7447)

  aqua-bot

  authored
  d246401

• fix(db): fix javadb downloading error handling [backport: release/v0.56] (aquasecurity#7646)

  Show description for 5dbdadf
  

  aqua-bot

  and

  nikpivkin

  authored
  5dbdadf

• release: v0.56.1 [release/v0.56] (aquasecurity#7648)

  aqua-bot

  authored
  95dbf11

Commits on Oct 9, 2024

• fix(sbom): add options for DBs in private registries [backport: release/v0.56] (aquasecurity#7691)

  Show description for 25d2540
  

  aqua-bot

  and

  knqyf263

  authored
  25d2540

Commits on Oct 10, 2024

• fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (aquasecurity#7702)

  Show description for f6700ec
  

  aqua-bot

  and

  knqyf263

  authored
  f6700ec

• release: v0.56.2 [release/v0.56] (aquasecurity#7694)

  aqua-bot

  authored
  f2252c8

Commits on Dec 20, 2024

• Make liveness probe configurable (#3)

  fhielpos

  committed
  cf3c724