aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote bug(os): Non-deterministic CentOS OS.Name across scans of the same image
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote bug: Trivy fails if credentials for registry contain a ","
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Issue with trivy scan license on .NET packages nuget
triage/supportIndicates an issue that is a support question. scan/licenseIssues relating to license scanning -
You must be logged in to vote Possible inconsistency in Status field for npm vulnerabilities (Status=fixed while installed version is still vulnerable)
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Discrepancy between JUnit and GitLab SAST templates
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote -
You must be logged in to vote differences between trivy and owasp dependency check
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Secret scanner output exposes unredacted secrets on context lines
scan/secretIssues relating to secret scanning -
You must be logged in to vote trivy-checks image is missing on gallery.ecr.aws
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote where is the 0.52.0
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Infer OS family from ID_LIKE in /etc/os-release as fallback
kind/featureCategorizes issue or PR as related to a new feature. target/repositoryIssues relating to VCS repository scanning -
You must be logged in to vote trivy-action fails to upload SARIF files after upgrading to trivy v0.69.1
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Populate
kind/feature.metadata.component.versionontrivy fsbom generationCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote trivy image and fs scan produce different results on the same files
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote vex repo: trigger all locations.url[] irrespective of fallback mechanism
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Feature Idea: Complement VEX with a Simple, Built-in Reachability Check
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote False Positive: GO-2026-5932 incorrectly flags golang.org/x/crypto even if openpgp subpackage is not used
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning
