search

microsoft / security-devops-azdevops

Microsoft Security DevOps extension for Azure DevOps.
MIT License
63 stars 17 forks source link

Trivy version is very out of date #78

Open JamesChristianson opened 1 year ago

JamesChristianson commented 1 year ago

This tool uses a very old version of trivy (v0.19.2), which causes issues because apps using package-lock.json lockfileVersion: 3 , are not supported and vulnerabilities aren't found.

When is this going to be updated? Having such a old version makes the tool hard to justify to use.

dotpaul commented 1 year ago

@davidknise is working on this