Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update to 0.59.0 #10

Merged
merged 185 commits into from
Mar 4, 2025
Merged

Update to 0.59.0 #10

merged 185 commits into from
Mar 4, 2025

Conversation

dstrelbytskyi
Copy link

Description

Related issues

  • Close #XXX

Related PRs

  • #XXX
  • #YYY

Remove this section if you don't have related PRs.

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

DmitriyLewen and others added 30 commits November 14, 2024 17:37
@DmitriyLewen
fix(report): handle [email protected] schema for misconfigs in sarif…
19aea4b 
… report (aquasecurity#7898)
@mgalesloot
docs: add Headlamp to the Trivy Ecosystem page (aquasecurity#7916)
c8add84
@DmitriyLewen
test: change branch in spdx schema link to check in integration tests (…
0d3d934 
…aquasecurity#7935)
@itaysk @simar7
docs: combine trivy.dev into trivy docs (aquasecurity#7884)
94791f8 
Co-authored-by: simar7 <[email protected]>
@Ferenc- @knqyf263
docs: add note about temporary podman socket (aquasecurity#7921)
a5f0ef5 
Signed-off-by: Ferenc Géczi <[email protected]>
Signed-off-by: Ferenc Géczi <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@DmitriyLewen
fix(redhat): don't return error if `root/buildinfo/content_manifests/…
38775a5 
…` contains files that are not `contentSets` files (aquasecurity#7912)
@knqyf263
fix(debian): infinite loop (aquasecurity#7928)
d982e6a 
Signed-off-by: knqyf263 <[email protected]>
@dependabot
chore(deps): bump the common group with 6 updates (aquasecurity#7904)
40f6e35 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump the aws group with 6 updates (aquasecurity#7902)
58fdab2 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@DmitriyLewen
fix(alpine): add UID for removed packages (aquasecurity#7887)
07915da
@simar7 @DmitriyLewen
feat: Update registry fallbacks (aquasecurity#7679)
5ba9a83 
Co-authored-by: DmitriyLewen <[email protected]>
@DmitriyLewen
docs: fix mistakes/typos (aquasecurity#7942)
9169f6f
@nick1989Gr
docs: Fix broken links (aquasecurity#7900)
afd7216
@nicwortel
feat(secret): Add built-in secrets rules for Private Packagist (aquas…
132d9df 
…ecurity#7826)
@aqua-bot @afdesk
ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (aq…
516e7cb 
…uasecurity#7945)

Co-authored-by: afdesk <[email protected]>
@afdesk
fix(k8s): check all results for vulnerabilities (aquasecurity#7946)
797b36f
@simar7
chore(deps): Bump up trivy-checks to v1.3.0 (aquasecurity#7959)
6565bef
@simar7
fix(misconf): Update trivy-checks default repo to mirror.gcr.io (aq…
9988147 
…uasecurity#7953)
@DmitriyLewen
feat(oracle): add flavors support (aquasecurity#7858)
b9b383e
@dependabot
chore(deps): bump the common group with 4 updates (aquasecurity#7949)
9688370 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@josegomezr
feat(suse): Align SUSE/OpenSUSE OS Identifiers (aquasecurity#7965)
45d3b40 
Signed-off-by: Jose D. Gomez R <[email protected]>
@santhosh1729
fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Pa…
461a68a 
…ckage Maintainer Details (aquasecurity#7871)
@DmitriyLewen @knqyf263
docs: add overview page for others (aquasecurity#7972)
de523ff 
Co-authored-by: Teppei Fukuda <[email protected]>
@gshanbhag525
feat: add cvss v4 score and vector in scan response (aquasecurity#7968)
e0f2054
@knqyf263
feat(go): construct dependencies in the parser (aquasecurity#7973)
bcdc0bb 
Signed-off-by: knqyf263 <[email protected]>
@DmitriyLewen @knqyf263
feat(go): construct dependencies of go.mod main module in the parser (
5448ba2 
aquasecurity#7977)

Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: knqyf263 <[email protected]>
@nikpivkin
fix(misconf): do not erase variable type for child modules (aquasecur…
de3b7ea 
…ity#7941)

Signed-off-by: nikpivkin <[email protected]>
@nikpivkin
chore: downgrade the failed block expand message to debug (aquasecuri…
32951f9 
…ty#7964)

Signed-off-by: nikpivkin <[email protected]>
@thiha-min-thant
chore(deps): update csaf module dependency from csaf-poc to gocsaf (a…
53d12bc 
…quasecurity#7992)

Signed-off-by: Thiha Min Thant <[email protected]>
@dependabot
chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in t…
83cb3da 
…he docker group across 1 directory (aquasecurity#7990)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
knqyf263 and others added 29 commits February 18, 2025 04:50
@knqyf263
test: replace mock with memory cache in scanner tests (aquasecurity#8413
5ed6fc6 
)
@knqyf263
test: replace mock with memory cache and fix non-deterministic tests (a…
10b8127 
…quasecurity#8410)
@knqyf263
test(server): replace mock driver with memory cache in server tests (a…
e9b3f0b 
…quasecurity#8416)
@knqyf263
chore: remove mockery (aquasecurity#8417)
613fc71
@iamtraining
fix(server): secrets inspectation for the config analyzer in client s…
a1c4bd7 
…erver mode (aquasecurity#8418)
@nikpivkin
fix(image): disable AVD-DS-0007 for history scanning (aquasecurity#8366)
a3cd693 
Signed-off-by: nikpivkin <[email protected]>
@nikpivkin
refactor(misconf): make Rego scanner independent of config type (aqua…
9c609c4 
…security#7517)

Signed-off-by: nikpivkin <[email protected]>
@nabokihms @DmitriyLewen
feat(go): fix parsing main module version for go >= 1.24 (aquasecurit…
e58dcfc 
…y#8433)

Signed-off-by: maksim.nabokikh <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
@DmitriyLewen @knqyf263
fix(sbom): add SBOM file's filePath as Application FilePath if we can…
ecc01bb 
…'t detect its path (aquasecurity#8346)

Co-authored-by: knqyf263 <[email protected]>
@afdesk
fix(k8s): add missed option PkgRelationships (aquasecurity#8442)
f987e41
@dependabot
chore(deps): bump the common group with 6 updates (aquasecurity#8411)
50364b8 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (a…
b3521e8 
…quasecurity#8443)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@itaysk @DmitriyLewen
fix: update all documentation links (aquasecurity#8045)
49456ba 
Co-authored-by: DmitriyLewen <[email protected]>
@tofay
chore(deps): update go-rustaudit location (aquasecurity#8450)
3840d90 
Signed-off-by: Tom Fay <[email protected]>
@RingoDev
feat(cyclonedx): Add initial support for loading external VEX files f…
4820eb7 
…rom SBOM references (aquasecurity#8254)
@nikpivkin
fix(misconf): fix incorrect k8s locations due to JSON to YAML convers…
a994453 
…ion (aquasecurity#8073)

Signed-off-by: nikpivkin <[email protected]>
@nikpivkin
feat(misconf): render causes for Terraform (aquasecurity#8360)
a99498c 
Signed-off-by: nikpivkin <[email protected]>
@DmitriyLewen
fix(db): fix case when 2 trivy-db were copied at the same time (aquas…
bb3cca6 
…ecurity#8452)
@RingoDev
docs: update VEX documentation index page (aquasecurity#8458)
036ab75
@DmitriyLewen
refactor(report): write tables after rendering all results (aquasecur…
3d3a3d6 
…ity#8357)
@simar7 @nikpivkin
chore(deps): Bump trivy-checks to v1.7.1 (aquasecurity#8467)
09cdae6 
Signed-off-by: nikpivkin <[email protected]>
Co-authored-by: nikpivkin <[email protected]>
@dependabot
chore(deps): bump the aws group across 1 directory with 7 updates (aq…
af1ea64 
…uasecurity#8468)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@afdesk
fix(os): add mapping OS aliases (aquasecurity#8466)
6b4cebe
@DmitriyLewen
feat: add --vuln-severity-source flag (aquasecurity#8269)
d464807
@knqyf263
ci: update GitHub Actions cache to v4 (aquasecurity#8475)
da0b876
@knqyf263
refactor(vex): improve SBOM reference handling with project standards (…
1f85b27 
…aquasecurity#8457)
@dependabot @nikpivkin
chore(deps): bump the github-actions group with 3 updates (aquasecuri…
ab1cf03 
…ty#8473)

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: nikpivkin <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: nikpivkin <[email protected]>
@knqyf263 @DmitriyLewen
feat: add report summary table (aquasecurity#8177)
dd54f80 
Signed-off-by: knqyf263 <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
Co-authored-by: DmitriyLewen <[email protected]>
@dstrelbytskyi
Merge branch 'main' into update_0.59.0
f50ff96 
# Conflicts:
#	contrib/junit.tpl
@dstrelbytskyi dstrelbytskyi merged commit a5c2944 into main_datarobot Mar 4, 2025
16 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.