Skip to content

Issues: aquasecurity/trivy

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

168 Open 2,364 Closed
168 Open 2,364 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Images with deleted timestamps break with Docker 26 kind/bug Categorizes issue or PR as related to a bug.
#6947 opened Jun 17, 2024 by DmitriyLewen
2 tasks done
1
@DmitriyLewen
File filters for conan lock no longer working kind/bug Categorizes issue or PR as related to a bug. scan/vulnerability Issues relating to vulnerability scanning target/repository Issues relating to VCS repository scanning
#6946 opened Jun 17, 2024 by DmitriyLewen
2 tasks done
@DmitriyLewen
bug(terraform): inline ignore doesn't work in remote modules kind/bug Categorizes issue or PR as related to a bug. scan/misconfiguration Issues relating to misconfiguration scanning
#6941 opened Jun 14, 2024 by nikpivkin
1
@nikpivkin
feat(misconf): support for Impact for Rego kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#6934 opened Jun 14, 2024 by nikpivkin
1
@nikpivkin
3
bug(conan): Trivy doesn't parse the .conan2/p directory to detect the license for the v2 lock file. kind/bug Categorizes issue or PR as related to a bug. scan/license Issues relating to license scanning
#6931 opened Jun 14, 2024 by DmitriyLewen
2 tasks done
chore(misconf): Transition Go checks to Rego scan/misconfiguration Issues relating to misconfiguration scanning
#6930 opened Jun 13, 2024 by simar7
@simar7 @nikpivkin
feat(misconf): Ignore duplicate checks if found kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#6929 opened Jun 13, 2024 by simar7
feat(misconf): Add selector support for all providers kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#6911 opened Jun 11, 2024 by simar7 v0.53.0
1
@simar7 @nikpivkin
feat(vuln): add --relationship flag to filter vulnerabilities by package relationship kind/feature Categorizes issue or PR as related to a new feature.
#6889 opened Jun 10, 2024 by knqyf263
3
feat(scala): support sbt-dependency-lock
#6886 opened Jun 10, 2024 by knqyf263 v0.53.0
1
BREAKING(aws): Deprecating trivy aws subcommand kind/breaking Categorizes issue or PR as related to breaking compatibility. scan/misconfiguration Issues relating to misconfiguration scanning
#6884 opened Jun 8, 2024 by simar7 v0.53.0
@simar7
feat: add flag to pass credentials to different Git hosting platforms kind/feature Categorizes issue or PR as related to a new feature. target/repository Issues relating to VCS repository scanning
#6833 opened May 31, 2024 by nikpivkin
HuggingFace token detector not working properly (wrong number of characters) help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug. scan/secret Issues relating to secret scanning
#6823 opened May 30, 2024 by DmitriyLewen
2 tasks done
1
JWT secret detector only works if "JWT" word is in scope help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. kind/bug Categorizes issue or PR as related to a bug.
#6802 opened May 28, 2024 by DmitriyLewen
2 tasks
fix(cyclonedx): trim non-URL characters kind/bug Categorizes issue or PR as related to a bug.
#6801 opened May 28, 2024 by knqyf263 v0.53.0
2
Some secret detection regexes expect the value to be surrounded by quotes kind/bug Categorizes issue or PR as related to a bug. scan/secret Issues relating to secret scanning
#6787 opened May 27, 2024 by nikpivkin
2 tasks done
2
Opt out of misconfig for specific k8s role kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. target/kubernetes Issues relating to kubernetes cluster scanning triage/support Indicates an issue that is a support question.
#6758 opened May 23, 2024 by chen-keinan
1
Trivy Node scan can't parse package.json when latest is used as a package version kind/bug Categorizes issue or PR as related to a bug.
#6747 opened May 22, 2024 by DmitriyLewen
2 tasks done
Trivy client server mode not scanning secrets exposed in image, Trivy standalone works kind/bug Categorizes issue or PR as related to a bug. priority/backlog Higher priority than priority/awaiting-more-evidence. target/container-image Issues relating to container image scanning
#6742 opened May 22, 2024 by chen-keinan
unexpected severity if nvd and source don't have severity for vulnerability
#6714 opened May 17, 2024 by DmitriyLewen
1
5
fix: scan .git/config for secrets help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. scan/secret Issues relating to secret scanning
#6699 opened May 16, 2024 by knqyf263
Support for Azure Linux 3.0 (AKA Mariner) kind/feature Categorizes issue or PR as related to a new feature.
#6673 opened May 13, 2024 by knqyf263
fix: skip only absolute filesystem dirs kind/bug Categorizes issue or PR as related to a bug.
#6651 opened May 7, 2024 by nikpivkin
2 tasks
1
feat(terraform): add support for the ssl_mode attribute of the google_sql_database_instance resource kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#6649 opened May 7, 2024 by nikpivkin
2 tasks done
@nikpivkin
node-collector: define and use trivy-checks commands kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. target/kubernetes Issues relating to kubernetes cluster scanning
#6602 opened May 2, 2024 by chen-keinan
1
@chen-keinan
ProTip! Updated in the last three days: updated:>2024-06-13.