From a79a01c42a9ff1140e2948986d4242cace13e740515869c3d0f220e95238fe20 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Wed, 28 Sep 2022 14:07:00 +0000 Subject: [PATCH] - Update to version 0.32.1: * fix(java): use fields of dependency from dependencyManagement from upper pom.xml to parse deps (#2943) * chore: expat lib and go binary deps vulns (#2940) * wasm: Removes accidentally exported memory (#2950) * fix(sbom): fix package name separation for gradle (#2906) * docs(readme.md): fix broken integrations link (#2931) * fix(image): handle images with single layer in rescan mergedLayers cache (#2927) * fix(cli): split env values with ',' for slice flags (#2926) * fix(cli): config/helm: also take into account files with `.yml` (#2928) * fix(flag): add file-patterns flag for config subcommand (#2925) * chore(deps): bump github.com/open-policy-agent/opa from 0.43.0 to 0.43.1 (#2902) OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/trivy?expand=0&rev=24 --- _service | 6 ++++-- _servicedata | 2 +- trivy-0.32.0.tar.gz | 3 --- trivy-0.32.1.tar.gz | 3 +++ trivy.changes | 15 +++++++++++++++ trivy.spec | 5 +++-- vendor.tar.gz | 3 --- vendor.tar.zst | 3 +++ 8 files changed, 29 insertions(+), 11 deletions(-) delete mode 100644 trivy-0.32.0.tar.gz create mode 100644 trivy-0.32.1.tar.gz delete mode 100644 vendor.tar.gz create mode 100644 vendor.tar.zst diff --git a/_service b/_service index e58c628..05a7839 100644 --- a/_service +++ b/_service @@ -2,7 +2,7 @@ https://github.com/aquasecurity/trivy git - v0.32.0 + v0.32.1 @PARENT_TAG@ v(.*) enable @@ -14,5 +14,7 @@ trivy - + + zst + diff --git a/_servicedata b/_servicedata index fd35f91..3644458 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/aquasecurity/trivy - 585985edb30fcd2ff60a90ad31c0aeb7ea4d445f \ No newline at end of file + 8b1cee845be41f50979e3ac0039660fbd3d4cf2b \ No newline at end of file diff --git a/trivy-0.32.0.tar.gz b/trivy-0.32.0.tar.gz deleted file mode 100644 index cf94a19..0000000 --- a/trivy-0.32.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c836242779677f4a9886a57737a8fd30d9949015f707cf86bf212d5c7f08787f -size 48950259 diff --git a/trivy-0.32.1.tar.gz b/trivy-0.32.1.tar.gz new file mode 100644 index 0000000..e282c6d --- /dev/null +++ b/trivy-0.32.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a611cf73072d4c20a92b1bebbc305f57c652209807a42fd0edbf29e746629957 +size 48947558 diff --git a/trivy.changes b/trivy.changes index a4a6f75..90d35f1 100644 --- a/trivy.changes +++ b/trivy.changes @@ -1,3 +1,18 @@ +------------------------------------------------------------------- +Wed Sep 28 13:42:03 UTC 2022 - dmueller@suse.com + +- Update to version 0.32.1: + * fix(java): use fields of dependency from dependencyManagement from upper pom.xml to parse deps (#2943) + * chore: expat lib and go binary deps vulns (#2940) + * wasm: Removes accidentally exported memory (#2950) + * fix(sbom): fix package name separation for gradle (#2906) + * docs(readme.md): fix broken integrations link (#2931) + * fix(image): handle images with single layer in rescan mergedLayers cache (#2927) + * fix(cli): split env values with ',' for slice flags (#2926) + * fix(cli): config/helm: also take into account files with `.yml` (#2928) + * fix(flag): add file-patterns flag for config subcommand (#2925) + * chore(deps): bump github.com/open-policy-agent/opa from 0.43.0 to 0.43.1 (#2902) + ------------------------------------------------------------------- Mon Sep 19 07:17:00 UTC 2022 - dmueller@suse.com diff --git a/trivy.spec b/trivy.spec index 930fe6e..7157593 100644 --- a/trivy.spec +++ b/trivy.spec @@ -19,15 +19,16 @@ %global goipath github.com/aquasecurity/trivy Name: trivy -Version: 0.32.0 +Version: 0.32.1 Release: 0 Summary: A Simple and Comprehensive Vulnerability Scanner for Containers License: Apache-2.0 Group: System/Management URL: https://github.com/aquasecurity/trivy Source: %{name}-%{version}.tar.gz -Source1: vendor.tar.gz +Source1: vendor.tar.zst BuildRequires: golang-packaging +BuildRequires: zstd BuildRequires: golang(API) = 1.19 Requires: ca-certificates Requires: git-core diff --git a/vendor.tar.gz b/vendor.tar.gz deleted file mode 100644 index 9bfd835..0000000 --- a/vendor.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:aceaa7a878a98a8accfdcff39e4107ba1613c5ff00cc4cc510047080befabfe3 -size 76156573 diff --git a/vendor.tar.zst b/vendor.tar.zst new file mode 100644 index 0000000..e6a34b4 --- /dev/null +++ b/vendor.tar.zst @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2967295997f9892b8965262afe1289fafe6cf6bce7359cc7b32c69281b5f7d4d +size 67586713