Skip to content

Issues: aquasecurity/trivy

Beta
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

163 Open 2,657 Closed
163 Open 2,657 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

bug(vex): Panic on scanning images with absent vex attestations. kind/bug Categorizes issue or PR as related to a bug.
#8857 opened May 12, 2025 by DmitriyLewen v0.63.0
1
@DmitriyLewen
enhancement(license): improve work with custom classification of licenses from config file scan/license Issues relating to license scanning
#8856 opened May 12, 2025 by DmitriyLewen v0.63.0
@DmitriyLewen
feat(misconf): Add long-id for checks into AVD kind/documentation Categorizes issue or PR as related to documentation. kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#8850 opened May 9, 2025 by simar7 v0.63.0
@simar7
feat(checks): Add S3 checks for less permissive buckets kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#8845 opened May 8, 2025 by simar7 v0.63.0
@nikpivkin
2
feat(nodejs): add a bun.lock analyzer kind/feature Categorizes issue or PR as related to a new feature.
#8840 opened May 7, 2025 by knqyf263
feat(nodejs): add a bun.lock parser kind/feature Categorizes issue or PR as related to a new feature.
#8839 opened May 7, 2025 by knqyf263
1
1
bug(misconf): Handle resources where pattern evaluation can return an unknown value kind/bug Categorizes issue or PR as related to a bug.
#8797 opened Apr 30, 2025 by simar7
2 tasks
v0.63.0
fix(deps): treat packages with same version but different dependencies as separate packages kind/bug Categorizes issue or PR as related to a bug.
#8776 opened Apr 25, 2025 by knqyf263
1
feat(checks): Improve AVD-AWS-0345 kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#8752 opened Apr 17, 2025 by simar7 v0.63.0
1
@simar7 @nikpivkin
8
feat(cli): Capture some basic information during the update check kind/feature Categorizes issue or PR as related to a new feature.
#8732 opened Apr 14, 2025 by owenrumney
1
feat(misconf): Adding support for detecting misconfigurations in docker-compose.yml natively kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#8729 opened Apr 12, 2025 by simar7
1
fix(checks): False positive for AVD-KSV-0033 and AVD-KSV-0035 when using Azure CR
#8728 opened Apr 12, 2025 by simar7
2 tasks done
v0.63.0
@nikpivkin
1
feat(checks): Add checks to detect suspicious Kubernetes URL annotations kind/feature Categorizes issue or PR as related to a new feature. target/kubernetes Issues relating to kubernetes cluster scanning
#8672 opened Apr 3, 2025 by simar7 v0.63.0
@simar7 @nikpivkin
10
bug: trivy convert always filters non-failures kind/bug Categorizes issue or PR as related to a bug.
#8670 opened Apr 2, 2025 by simar7
1 of 2 tasks
v0.63.0
1
@nikpivkin
feat(misconf): Add minimum supported version kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
#8637 opened Mar 28, 2025 by simar7 v0.63.0
@simar7
5
bug(sbom): sbom mode should support --distro flag kind/bug Categorizes issue or PR as related to a bug. scan/sbom Issues relating to SBOM
#8636 opened Mar 28, 2025 by DmitriyLewen v0.63.0
@DmitriyLewen
bug(report): Trivy panics when converting json report without Packages to table report with summary table kind/bug Categorizes issue or PR as related to a bug.
#8622 opened Mar 27, 2025 by DmitriyLewen
1
@DmitriyLewen
2
feat(k8s): improve k8s scanning to handle namespace-restricted controllers kind/feature Categorizes issue or PR as related to a new feature. target/kubernetes Issues relating to kubernetes cluster scanning
#8620 opened Mar 27, 2025 by afdesk v0.63.0
@simar7 @afdesk
4
feat(cli): Add new version checking kind/feature Categorizes issue or PR as related to a new feature.
#8552 opened Mar 14, 2025 by owenrumney
1
@owenrumney
bug(k8s): trivy k8s scan throws panic: runtime error: slice bounds out of range error kind/bug Categorizes issue or PR as related to a bug.
#8542 opened Mar 13, 2025 by simar7
2 tasks done
v0.63.0
@simar7
feat(license): scan vendor directory for license for go.mod files good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. scan/license Issues relating to license scanning
#8527 opened Mar 11, 2025 by DmitriyLewen
4
bug(sbom): Trivy only checks parents from the current result when plotting the dependency graph kind/bug Categorizes issue or PR as related to a bug. scan/sbom Issues relating to SBOM
#8516 opened Mar 10, 2025 by DmitriyLewen
@DmitriyLewen
1
docs: add explanation for how to use non-system certificates good first issue Denotes an issue ready for a new contributor, according to the "help wanted" guidelines. kind/documentation Categorizes issue or PR as related to documentation.
#8440 opened Feb 24, 2025 by knqyf263
@rnemeth90
5
feat(flag): resolve env's from config file kind/feature Categorizes issue or PR as related to a new feature.
#8436 opened Feb 24, 2025 by DmitriyLewen
@DmitriyLewen
1
feat(opensuse): add MicroOS and Leap Micro support help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. scan/vulnerability Issues relating to vulnerability scanning
#8409 opened Feb 17, 2025 by DmitriyLewen
1
ProTip! Find all open issues with in progress development work with linked:pr.