aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote pnpm workspace with overlapping direct dependencies causes non-deterministic package resolution
kind/bugCategorizes issue or PR as related to a bug. scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote misconfig scanner panics on images with a HEALTHCHECK history line but no Healthcheck config
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote False positive: GHSA-fh5r-crhr-qrrq (CVE-2025-23184) cxf core 3.5.8.redhat-00001
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Support for Hadron Linux (musl-based immutable distro, used by Kairos) in Trivy
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Dev for trivy-azure-pipelines-task?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote -
You must be logged in to vote Cannot build with
triage/supportgo installwith 1.27rc2Indicates an issue that is a support question. -
You must be logged in to vote trivy server/client mode failed to scan offline
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote [Java/Maven] Filesystem scan runs into 429 - Too many requests
scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote panic: value is marked, so must be unmarked first
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote False positive CVE-2025-35036 — hibernate-validator 6.0.23.SP1-redhat-00001 flagged but Red Hat backported the fix
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Can't scan
target/container-imageIssues relating to container image scanning -
You must be logged in to vote -
You must be logged in to vote Unable to parse container in AKS
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Comparison between OSV-Scanner and Trivy
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote how we can ignore false positive alerts in trivy
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote [Feature] Post-quantum cryptography (PQC) detection - bridge Trivy to CBOM scanning
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Add support for PDM lockfile
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote Bad CVE URLs generated
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Add support for Tuist's .package.resolved SPM lockfile
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote Update supported package managers for
kind/documentation--include-dev-depsflagCategorizes issue or PR as related to documentation. -
You must be logged in to vote Filesystem scan ignores all pnpm dependencies if
kind/bugpnpm-lock.yamlcontains multiple YAML documentsCategorizes issue or PR as related to a bug.
