* ci: remove 32bit packages (#4585) * fix(misconf): deduplicate misconf results (#4588) * fix(vm): support sector size of 4096 (#4564) * fix(misconf): terraform relative paths (#4571) * fix(purl): skip unsupported library type (#4577) * fix(terraform): recursively detect all Root Modules (#4457) * fix(vm): support post analyzer for vm command (#4544) * fix(nodejs): change the type of the devDependencies field (#4560) * fix(sbom): export empty dependencies in CycloneDX (#4568) * refactor: add composite fs for post-analyzers (#4556) * chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#4554) * chore(deps): bump helm/kind-action from 1.5.0 to 1.7.0 (#4526) * chore(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (#4528) * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.2 to 2.30.3 (#4529) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#4536) * chore(deps): bump github.com/tetratelabs/wazero from 1.0.0 to 1.2.0 (#4549) * chore(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 (#4532) * chore(deps): bump github.com/testcontainers/testcontainers-go (#4537) * chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530) * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#4534) * chore(deps): bump github.com/sigstore/rekor from 1.2.0 to 1.2.1 (#4533) * chore(deps): bump alpine from 3.17.3 to 3.18.0 (#4525) * feat: add SBOM analyzer (#4210) * fix(sbom): update logic for work with files in spdx format (#4513) * feat: azure workload identity support (#4489) * feat(ubuntu): add eol date for 18.04 ESM (#4524) * fix(misconf): Update required extensions for terraformplan (#4523) * refactor(cyclonedx): add intermediate representation (#4490) * fix(misconf): Remove debug print while scanning (#4521) OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/trivy?expand=0&rev=63
Description
Trivy (
tri pronounced like trigger, vy pronounced like envy) is a simple and
comprehensive vulnerability scanner for containers and other artifacts. A
software vulnerability is a glitch, flaw, or weakness present in the software or
in an Operating System. Trivy detects vulnerabilities of OS packages (Alpine,
RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn,
etc.). Trivy is easy to use. Just install the binary and you're ready to
scan. All you need to do for scanning is to specify a target such as an image
name of the container.
Languages
XML
100%