sonarcloud[bot]
commented
1 year ago Kudos, SonarCloud Quality Gate passed! 
0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells
No Coverage information
No Duplication information
This PR contains the following updates:
0.37.3->0.38.0Release Notes
aquasecurity/trivy
### [`v0.38.0`](https://togithub.com/aquasecurity/trivy/releases/tag/v0.38.0) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.37.3...v0.38.0) ##### ⚡Release highlights and summary⚡ 👉 [https://github.com/aquasecurity/trivy/discussions/3719](https://togithub.com/aquasecurity/trivy/discussions/3719) ##### Changelog - [`bc08366`](https://togithub.com/aquasecurity/trivy/commit/bc0836623) fix(cli): pass integer to exit-on-eol ([#3716](https://togithub.com/aquasecurity/trivy/issues/3716)) - [`23cdac0`](https://togithub.com/aquasecurity/trivy/commit/23cdac02e) feat: add kubernetes pss compliance ([#3498](https://togithub.com/aquasecurity/trivy/issues/3498)) - [`302c8ae`](https://togithub.com/aquasecurity/trivy/commit/302c8ae24) feat: Adding --module-dir and --enable-modules ([#3677](https://togithub.com/aquasecurity/trivy/issues/3677)) - [`34120f4`](https://togithub.com/aquasecurity/trivy/commit/34120f420) feat: add special IDs for filtering secrets ([#3702](https://togithub.com/aquasecurity/trivy/issues/3702)) - [`e399ed8`](https://togithub.com/aquasecurity/trivy/commit/e399ed843) chore(deps): Update defsec ([#3713](https://togithub.com/aquasecurity/trivy/issues/3713)) - [`ef7b762`](https://togithub.com/aquasecurity/trivy/commit/ef7b762e4) docs(misconf): Add guide on input schema ([#3692](https://togithub.com/aquasecurity/trivy/issues/3692)) - [`00daebc`](https://togithub.com/aquasecurity/trivy/commit/00daebc16) feat(go): support dependency graph and show only direct dependencies in the tree ([#3691](https://togithub.com/aquasecurity/trivy/issues/3691)) - [`98d1031`](https://togithub.com/aquasecurity/trivy/commit/98d103155) feat: docker multi credential support ([#3631](https://togithub.com/aquasecurity/trivy/issues/3631)) - [`b791362`](https://togithub.com/aquasecurity/trivy/commit/b79136287) feat: summarize vulnerabilities in compliance reports ([#3651](https://togithub.com/aquasecurity/trivy/issues/3651)) - [`719fdb1`](https://togithub.com/aquasecurity/trivy/commit/719fdb1b1) feat(python): parse pyproject.toml alongside poetry.lock ([#3695](https://togithub.com/aquasecurity/trivy/issues/3695)) - [`3ff5699`](https://togithub.com/aquasecurity/trivy/commit/3ff5699b4) feat(python): add dependency tree for poetry lock file ([#3665](https://togithub.com/aquasecurity/trivy/issues/3665)) - [`33909d9`](https://togithub.com/aquasecurity/trivy/commit/33909d9df) fix(cyclonedx): incompliant affect ref ([#3679](https://togithub.com/aquasecurity/trivy/issues/3679)) - [`d85a3e0`](https://togithub.com/aquasecurity/trivy/commit/d85a3e087) chore(helm): update skip-db-update environment variable ([#3657](https://togithub.com/aquasecurity/trivy/issues/3657)) - [`551899c`](https://togithub.com/aquasecurity/trivy/commit/551899c24) fix(spdx): change CreationInfo timestamp format RFC3336Nano to RFC3336 ([#3675](https://togithub.com/aquasecurity/trivy/issues/3675)) - [`3aaa2cf`](https://togithub.com/aquasecurity/trivy/commit/3aaa2cfb7) fix(sbom): export empty dependencies in CycloneDX ([#3664](https://togithub.com/aquasecurity/trivy/issues/3664)) - [`9d1300c`](https://togithub.com/aquasecurity/trivy/commit/9d1300c3e) docs: java-db air-gap doc tweaks ([#3561](https://togithub.com/aquasecurity/trivy/issues/3561)) - [`793cc43`](https://togithub.com/aquasecurity/trivy/commit/793cc43d4) feat(go): license support ([#3683](https://togithub.com/aquasecurity/trivy/issues/3683)) - [`6a3294e`](https://togithub.com/aquasecurity/trivy/commit/6a3294e47) feat(ruby): add dependency tree/location support for Gemfile.lock ([#3669](https://togithub.com/aquasecurity/trivy/issues/3669)) - [`e9dc21d`](https://togithub.com/aquasecurity/trivy/commit/e9dc21d88) fix(k8s): k8s label size ([#3678](https://togithub.com/aquasecurity/trivy/issues/3678)) - [`12976d4`](https://togithub.com/aquasecurity/trivy/commit/12976d42d) fix(cyclondx): fix array empty value, null to \[] ([#3676](https://togithub.com/aquasecurity/trivy/issues/3676)) - [`1dc2b34`](https://togithub.com/aquasecurity/trivy/commit/1dc2b349c) refactor: rewrite gomod analyzer as post-analyzer ([#3674](https://togithub.com/aquasecurity/trivy/issues/3674)) - [`92eaf63`](https://togithub.com/aquasecurity/trivy/commit/92eaf636c) feat: config outdated-api result filtered by k8s version ([#3578](https://togithub.com/aquasecurity/trivy/issues/3578)) - [`9af436b`](https://togithub.com/aquasecurity/trivy/commit/9af436b99) fix: Update to Alpine 3.17.2 ([#3655](https://togithub.com/aquasecurity/trivy/issues/3655)) - [`88ee68d`](https://togithub.com/aquasecurity/trivy/commit/88ee68d0c) feat: add support for virtual files ([#3654](https://togithub.com/aquasecurity/trivy/issues/3654)) - [`75c96bd`](https://togithub.com/aquasecurity/trivy/commit/75c96bd96) feat: add post-analyzers ([#3640](https://togithub.com/aquasecurity/trivy/issues/3640)) - [`baea399`](https://togithub.com/aquasecurity/trivy/commit/baea3997d) chore(deps): updates wazero to 1.0.0-pre.9 ([#3653](https://togithub.com/aquasecurity/trivy/issues/3653)) - [`7ca0db1`](https://togithub.com/aquasecurity/trivy/commit/7ca0db17e) chore(deps): bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 ([#3528](https://togithub.com/aquasecurity/trivy/issues/3528)) - [`866999e`](https://togithub.com/aquasecurity/trivy/commit/866999e45) chore(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.18 ([#3633](https://togithub.com/aquasecurity/trivy/issues/3633)) - [`b7bfb9a`](https://togithub.com/aquasecurity/trivy/commit/b7bfb9a20) feat(python): add dependency locations for Pipfile.lock ([#3614](https://togithub.com/aquasecurity/trivy/issues/3614)) - [`9badef2`](https://togithub.com/aquasecurity/trivy/commit/9badef27a) chore(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 ([#3648](https://togithub.com/aquasecurity/trivy/issues/3648)) - [`d856595`](https://togithub.com/aquasecurity/trivy/commit/d856595b8) fix(java): fix groupID selection by ArtifactID for jar files. ([#3644](https://togithub.com/aquasecurity/trivy/issues/3644)) - [`fe7c26a`](https://togithub.com/aquasecurity/trivy/commit/fe7c26a74) chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.63.1 to 1.85.0 ([#3607](https://togithub.com/aquasecurity/trivy/issues/3607)) - [`f251dfc`](https://togithub.com/aquasecurity/trivy/commit/f251dfc5c) fix(aws): Adding a fix for update-cache flag that is not applied on AWS scans. ([#3619](https://togithub.com/aquasecurity/trivy/issues/3619)) - [`9be8062`](https://togithub.com/aquasecurity/trivy/commit/9be8062c1) feat(cli): add command completion ([#3061](https://togithub.com/aquasecurity/trivy/issues/3061)) - [`370098d`](https://togithub.com/aquasecurity/trivy/commit/370098dbf) docs(misconf): update dockerfile link ([#3627](https://togithub.com/aquasecurity/trivy/issues/3627)) - [`32acd29`](https://togithub.com/aquasecurity/trivy/commit/32acd293f) feat(flag): add exit-on-eosl option ([#3423](https://togithub.com/aquasecurity/trivy/issues/3423)) - [`aa8e185`](https://togithub.com/aquasecurity/trivy/commit/aa8e185e0) chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 ([#3533](https://togithub.com/aquasecurity/trivy/issues/3533)) - [`86603bb`](https://togithub.com/aquasecurity/trivy/commit/86603bb9c) fix(cli): make java db repository configurable ([#3595](https://togithub.com/aquasecurity/trivy/issues/3595)) - [`7b1e173`](https://togithub.com/aquasecurity/trivy/commit/7b1e173f5) chore: bump trivy-kubernetes ([#3613](https://togithub.com/aquasecurity/trivy/issues/3613))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.