aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote Add Trivy Version, Trivy-DB date/version, Java-DB date/version to output
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Allow specification of SBOM product purl during scan
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote terraform module ${path.module} panic
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote trivy.db not downloaded although file not there
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote distro alma/10 (newest release) does not deliver rpm findings
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote Detect local platform when scanning image from remote source
kind/featureCategorizes issue or PR as related to a new feature. target/container-imageIssues relating to container image scanning -
You must be logged in to vote How to create custom checks detecting destroy operations in plan
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote When resolving Terraform modules from registry, Trivy does not utilize remote service discovery
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote License text classification doesn't work as expected
triage/supportIndicates an issue that is a support question. scan/licenseIssues relating to license scanning -
You must be logged in to vote Since 0.65.0, repository credentials are leaked in RepoURL metadata of JSON report
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote the command "trivy k8s --report all --compliance k8s-cis-1.23 --format table" doesn't show the output
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Centralised usage of .trivyignore file for composite github actions
kind/featureCategorizes issue or PR as related to a new feature. scan/misconfigurationIssues relating to misconfiguration scanning target/repositoryIssues relating to VCS repository scanning -
You must be logged in to vote Warn about sensitive data in environment variables that aren't in Kubernetes secrets
kind/featureCategorizes issue or PR as related to a new feature. scan/misconfigurationIssues relating to misconfiguration scanning target/kubernetesIssues relating to kubernetes cluster scanning -
You must be logged in to vote jdom license classification not correct
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote License object sometimes has "id" sometimes "name" when SBOM is created with version 0.65.0
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote license detection regression in trivy 0.65
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote CVEs in latest Trivy build (v0.65.0)
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Fatal error
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote persistent option flag may doesn't work
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Error while SBOM's parsing of MetadataComponent when JSON generated by syft
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Can we bump go from
triage/support1.24.4to1.24.5to remediate CVE-2025-4674?Indicates an issue that is a support question. -
You must be logged in to vote Support for K8s CIS v1.10+ and GKE scans
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Windows container
lifecycle/staleDenotes an issue or PR has remained open with no activity and will be auto-closed.
