List view

feat: add SHA-512 hash support for SBOM formats (CycloneDX and SPDX)

good first issueDenotes an issue ready for a new contributor, according to the "help wanted" guidelines.Denotes an issue ready for a new contributor, according to the "help wanted" guidelines.

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/sbomIssues relating to SBOMIssues relating to SBOM

Status: Open.

Feature

#9094 In aquasecurity/trivy;

· knqyf263 opened on Jun 30, 2025

feat(java): add license support for jar files

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Feature

#4734 In aquasecurity/trivy;

· DmitriyLewen opened on Jun 29, 2023

bug(vulnerability): <code>--vuln-severity-source</code> doesn't work for package-specific severity (e.g. Debian)

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/vulnerabilityIssues relating to vulnerability scanningIssues relating to vulnerability scanning

Status: Open.

Bug

#9191 In aquasecurity/trivy;

· DmitriyLewen opened on Jul 14, 2025

bug(license): Trivy splits licenses that include the WITH separator when determining the category.

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Bug

#9379 In aquasecurity/trivy;

· DmitriyLewen opened on Aug 25, 2025

bug(cyclonedx): CycloneDX report includes empty license

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Bug

#9376 In aquasecurity/trivy;

· DmitriyLewen opened on Aug 25, 2025

bug(cyclonedx): Trivy adds license ID/name and SPDX expression simultaneously for one component

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Bug

#9300 In aquasecurity/trivy;

· DmitriyLewen opened on Aug 1, 2025

bug(repo): Trivy shows Git credentials in the <code>Metadata.RepoURL</code> field.

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

Bug

#9390 In aquasecurity/trivy;

· DmitriyLewen opened on Aug 27, 2025