search

dentsusoken / build-and-scan-image

Build and scan Dockerfile and container image
MIT License
3 stars 3 forks source link

chore(deps): update dependency aquasecurity/trivy to v0.53.0 #159

Closed ShibataTakao closed 4 months ago

ShibataTakao commented 4 months ago

This PR contains the following updates:

Package Update Change
aquasecurity/trivy minor 0.52.2 -> 0.53.0

Release Notes

aquasecurity/trivy (aquasecurity/trivy) ### [`v0.53.0`](https://togithub.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0530-2024-07-01) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.2...v0.53.0) ##### ⚠ BREAKING CHANGES - **k8s:** node-collector dynamic commands support ([#​6861](https://togithub.com/aquasecurity/trivy/issues/6861)) - add clean subcommand ([#​6993](https://togithub.com/aquasecurity/trivy/issues/6993)) - **aws:** Remove aws subcommand ([#​6995](https://togithub.com/aquasecurity/trivy/issues/6995)) ##### Features - add clean subcommand ([#​6993](https://togithub.com/aquasecurity/trivy/issues/6993)) ([8d0ae1f](https://togithub.com/aquasecurity/trivy/commit/8d0ae1f5de72d92a043dcd6b7c164d30e51b6047)) - Add local ImageID to SARIF metadata ([#​6522](https://togithub.com/aquasecurity/trivy/issues/6522)) ([f144e91](https://togithub.com/aquasecurity/trivy/commit/f144e912d34234f00b5a13b7a11a0019fa978b27)) - add memory cache backend ([#​7048](https://togithub.com/aquasecurity/trivy/issues/7048)) ([55ccd06](https://togithub.com/aquasecurity/trivy/commit/55ccd06df43f6ff28685f46d215ccb70f55916d2)) - **aws:** Remove aws subcommand ([#​6995](https://togithub.com/aquasecurity/trivy/issues/6995)) ([979e118](https://togithub.com/aquasecurity/trivy/commit/979e118a9e0ca8943bef9143f492d7eb1fd4d863)) - **conda:** add licenses support for `environment.yml` files ([#​6953](https://togithub.com/aquasecurity/trivy/issues/6953)) ([654217a](https://togithub.com/aquasecurity/trivy/commit/654217a65485ca0a07771ea61071977894eb4920)) - **dart:** use first version of constraint for dependencies using SDK version ([#​6239](https://togithub.com/aquasecurity/trivy/issues/6239)) ([042d6b0](https://togithub.com/aquasecurity/trivy/commit/042d6b08c283105c258a3dda98983b345a5305c3)) - **image:** Set User-Agent header for Trivy container registry requests ([#​6868](https://togithub.com/aquasecurity/trivy/issues/6868)) ([9b31697](https://togithub.com/aquasecurity/trivy/commit/9b31697274c8743d6e5a8f7a1a05daf60cd15910)) - **java:** add support for `maven-metadata.xml` files for remote snapshot repositories. ([#​6950](https://togithub.com/aquasecurity/trivy/issues/6950)) ([1f8fca1](https://togithub.com/aquasecurity/trivy/commit/1f8fca1fc77b989bb4e3ba820b297464dbdd825f)) - **java:** add support for sbt projects using sbt-dependency-lock ([#​6882](https://togithub.com/aquasecurity/trivy/issues/6882)) ([f18d035](https://togithub.com/aquasecurity/trivy/commit/f18d035ae13b281c96aa4ed69ca32e507d336e66)) - **k8s:** node-collector dynamic commands support ([#​6861](https://togithub.com/aquasecurity/trivy/issues/6861)) ([8d618e4](https://togithub.com/aquasecurity/trivy/commit/8d618e48a2f1b60c2e4c49cdd9deb8eb45c972b0)) - **misconf:** add metadata to Cloud schema ([#​6831](https://togithub.com/aquasecurity/trivy/issues/6831)) ([02d5404](https://togithub.com/aquasecurity/trivy/commit/02d540478d495416b50d7e8b187ff9f5bba41f45)) - **misconf:** add support for AWS::EC2::SecurityGroupIngress/Egress ([#​6755](https://togithub.com/aquasecurity/trivy/issues/6755)) ([55fa610](https://togithub.com/aquasecurity/trivy/commit/55fa6109cd0463fd3221aae41ca7b1d8c44ad430)) - **misconf:** API Gateway V1 support for CloudFormation ([#​6874](https://togithub.com/aquasecurity/trivy/issues/6874)) ([8491469](https://togithub.com/aquasecurity/trivy/commit/8491469f0b35bd9df706a433669f5b62239d4ef3)) - **misconf:** support of selectors for all providers for Rego ([#​6905](https://togithub.com/aquasecurity/trivy/issues/6905)) ([bc3741a](https://togithub.com/aquasecurity/trivy/commit/bc3741ae2c68cdd00fc0aef7e51985568b2eb78a)) - **php:** add installed.json file support ([#​4865](https://togithub.com/aquasecurity/trivy/issues/4865)) ([edc556b](https://togithub.com/aquasecurity/trivy/commit/edc556b85e3554c31e19b1ece189effb9ba2be12)) - **plugin:** add support for nested archives ([#​6845](https://togithub.com/aquasecurity/trivy/issues/6845)) ([622c67b](https://togithub.com/aquasecurity/trivy/commit/622c67b7647f94d0a0ca3acf711d8f847cdd8d98)) - **sbom:** migrate to `CycloneDX v1.6` ([#​6903](https://togithub.com/aquasecurity/trivy/issues/6903)) ([09e50ce](https://togithub.com/aquasecurity/trivy/commit/09e50ce6a82073ba62f1732d5aa0cd2701578693)) ##### Bug Fixes - **c:** don't skip conan files from `file-patterns` and scan `.conan2` cache dir ([#​6949](https://togithub.com/aquasecurity/trivy/issues/6949)) ([38b35dd](https://togithub.com/aquasecurity/trivy/commit/38b35dd3c804027e7a6e6a9d3c87b7ac333896c5)) - **cli:** show info message only when --scanners is available ([#​7032](https://togithub.com/aquasecurity/trivy/issues/7032)) ([e9fc3e3](https://togithub.com/aquasecurity/trivy/commit/e9fc3e3397564512038ddeca2adce0efcb3f93c5)) - **cyclonedx:** trim non-URL info for `advisory.url` ([#​6952](https://togithub.com/aquasecurity/trivy/issues/6952)) ([417212e](https://togithub.com/aquasecurity/trivy/commit/417212e0930aa52a27ebdc1b9370d2943ce0f8fa)) - **debian:** take installed files from the origin layer ([#​6849](https://togithub.com/aquasecurity/trivy/issues/6849)) ([089b953](https://togithub.com/aquasecurity/trivy/commit/089b953462260f01c40bdf588b2568ae0ef658bc)) - **image:** parse `image.inspect.Created` field only for non-empty values ([#​6948](https://togithub.com/aquasecurity/trivy/issues/6948)) ([0af5730](https://togithub.com/aquasecurity/trivy/commit/0af5730cbe56686417389c2fad643c1bdbb33999)) - **license:** return license separation using separators `,`, `or`, etc. ([#​6916](https://togithub.com/aquasecurity/trivy/issues/6916)) ([52f7aa5](https://togithub.com/aquasecurity/trivy/commit/52f7aa54b520a90a19736703f8ea63cc20fab104)) - **misconf:** fix caching of modules in subdirectories ([#​6814](https://togithub.com/aquasecurity/trivy/issues/6814)) ([0bcfedb](https://togithub.com/aquasecurity/trivy/commit/0bcfedbcaa9bbe30ee5ecade5b98e9ce3cc54c9b)) - **misconf:** fix parsing of engine links and frameworks ([#​6937](https://togithub.com/aquasecurity/trivy/issues/6937)) ([ec68c9a](https://togithub.com/aquasecurity/trivy/commit/ec68c9ab4580d057720179173d58734402c92af4)) - **misconf:** handle source prefix to ignore ([#​6945](https://togithub.com/aquasecurity/trivy/issues/6945)) ([c3192f0](https://togithub.com/aquasecurity/trivy/commit/c3192f061d7e84eaf38df8df7c879dc00b4ca137)) - **misconf:** parsing numbers without fraction as int ([#​6834](https://togithub.com/aquasecurity/trivy/issues/6834)) ([8141a13](https://togithub.com/aquasecurity/trivy/commit/8141a137ba50b553a9da877d95c7ccb491d041c6)) - **nodejs:** fix infinite loop when package link from `package-lock.json` file is broken ([#​6858](https://togithub.com/aquasecurity/trivy/issues/6858)) ([cf5aa33](https://togithub.com/aquasecurity/trivy/commit/cf5aa336e660e4c98481ebf8d15dd4e54c38581e)) - **nodejs:** fix infinity loops for `pnpm` with cyclic imports ([#​6857](https://togithub.com/aquasecurity/trivy/issues/6857)) ([7d083bc](https://togithub.com/aquasecurity/trivy/commit/7d083bc890eccc3bf32765c6d7e922cab2e2ef94)) - **plugin:** respect `--insecure` ([#​7022](https://togithub.com/aquasecurity/trivy/issues/7022)) ([3d02a31](https://togithub.com/aquasecurity/trivy/commit/3d02a31b44924f9e2495aae087f7ca9de3314db4)) - **purl:** add missed os types ([#​6955](https://togithub.com/aquasecurity/trivy/issues/6955)) ([2d85a00](https://togithub.com/aquasecurity/trivy/commit/2d85a003b22298d1101f84559f7c6b470f2b3909)) - **python:** compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase ([#​6852](https://togithub.com/aquasecurity/trivy/issues/6852)) ([faa9d92](https://togithub.com/aquasecurity/trivy/commit/faa9d92cfeb8d924deda2dac583b6c97099c08d9)) - **sbom:** don't overwrite `srcEpoch` when decoding SBOM files ([#​6866](https://togithub.com/aquasecurity/trivy/issues/6866)) ([04af59c](https://togithub.com/aquasecurity/trivy/commit/04af59c2906bcfc7f7970b4e8f45a90f04313170)) - **sbom:** fix panic when scanning SBOM file without root component into SBOM format ([#​7051](https://togithub.com/aquasecurity/trivy/issues/7051)) ([3d4ae8b](https://togithub.com/aquasecurity/trivy/commit/3d4ae8b5be94cd9b00badeece8d86c2258b2cd90)) - **sbom:** take pkg name from `purl` for maven pkgs ([#​7008](https://togithub.com/aquasecurity/trivy/issues/7008)) ([a76e328](https://togithub.com/aquasecurity/trivy/commit/a76e3286c413de3dec55394fb41dd627dfee37ae)) - **sbom:** use `purl` for `bitnami` pkg names ([#​6982](https://togithub.com/aquasecurity/trivy/issues/6982)) ([7eabb92](https://togithub.com/aquasecurity/trivy/commit/7eabb92ec2e617300433445718be07ac74956454)) - **sbom:** use package UIDs for uniqueness ([#​7042](https://togithub.com/aquasecurity/trivy/issues/7042)) ([14d71ba](https://togithub.com/aquasecurity/trivy/commit/14d71ba63c39e51dd4179ba2d6002b46e1816e90)) - **secret:** `Asymmetric Private Key` shouldn't start with space ([#​6867](https://togithub.com/aquasecurity/trivy/issues/6867)) ([bb26445](https://togithub.com/aquasecurity/trivy/commit/bb26445e3df198df77930329f532ac5ab7a67af2)) - **suse:** Add SLES 15.6 and Leap 15.6 ([#​6964](https://togithub.com/aquasecurity/trivy/issues/6964)) ([5ee4e9d](https://togithub.com/aquasecurity/trivy/commit/5ee4e9d30ea814f60fd5705361cabf2e83a47a78)) - use embedded when command path not found ([#​7037](https://togithub.com/aquasecurity/trivy/issues/7037)) ([137c916](https://togithub.com/aquasecurity/trivy/commit/137c9164238ffd989a0c5ed24f23a55bbf341f6e))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Renovate Bot.