Skip to content

feat(alinux): add support for Alibaba Cloud Linux#10183

Open
shiloong wants to merge 1 commit into
aquasecurity:mainfrom
shiloong:main
Open

feat(alinux): add support for Alibaba Cloud Linux#10183
shiloong wants to merge 1 commit into
aquasecurity:mainfrom
shiloong:main

Conversation

@shiloong

@shiloong shiloong commented Feb 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Description

It would be interesting to add support for the Alibaba Cloud Linux Linux distribution.

Alibaba Cloud Linux (short for Alinux) is a next-generation Linux distribution released by Alibaba Cloud. It includes advanced features developed by the Linux community, and provides a stable and reliable environment for applications running on the cloud.

The Alinux Security Team provides a publicly available Alinux Security Center, which serves as the official channel for publishing product vulnerability databases and security advisories. We request community support to enable vulnerability scanning for Alinux and facilitate the provision of machine-readable security data in OVAL and CSAF_VEX standard formats.

Trivy is widely used by customers on Alibaba Cloud for Linux container image scanning, but currently does not support Alinux vulnerability scanning. Hope this support can be added soon.

Related issues

Related PRs

Remove this section if you don't have related PRs.

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@shiloong
feat(alinux): add support for Alibaba Cloud Linux
cf9fd0d 
Signed-off-by: Shiloong <shile.zhang@linux.alibaba.com>
@shiloong

shiloong commented Feb 27, 2026

Copy link
Copy Markdown
Author

Hi, @DmitriyLewen @knqyf263:
Cloud you please help to review this PR for Alibaba Cloud Linux?
Looking forward to your comments.

@DmitriyLewen

DmitriyLewen commented Feb 27, 2026

Copy link
Copy Markdown
Contributor

Hi, @shiloong
Right now we're busy with other tasks.
When we have time, we'll review your PR.

@itaysk

itaysk commented Feb 27, 2026

Copy link
Copy Markdown
Contributor

Hi @shiloong , thanks for your contribution and interest in Trivy. There are two main criteria for adding support in a new OS in Trivy: 1) Is the OS open source? if no, then we first need to establish agreement via our partners program. if it's open source, then no need for agreement. 2) Then, prioritizing the work which considers: community interest, maturity of the OS, complexity of the work, and most importantly team capacity and existing commitments.
Regarding Alibaba Linux: 1) from my research it appears to be open source and freely available to users, can you please confirm? 2) we have not received many requests for this. also there are other OS contributions which we want to support and are awaiting longer.

@shiloong

shiloong commented Mar 2, 2026

Copy link
Copy Markdown
Author

Hi, @shiloong Right now we're busy with other tasks. When we have time, we'll review your PR.

Thanks for your reply, waiting for your time.

@shiloong

shiloong commented Mar 2, 2026

Copy link
Copy Markdown
Author

Hi @shiloong , thanks for your contribution and interest in Trivy. There are two main criteria for adding support in a new OS in Trivy: 1) Is the OS open source? if no, then we first need to establish agreement via our partners program. if it's open source, then no need for agreement. 2) Then, prioritizing the work which considers: community interest, maturity of the OS, complexity of the work, and most importantly team capacity and existing commitments. Regarding Alibaba Linux: 1) from my research it appears to be open source and freely available to users, can you please confirm? 2) we have not received many requests for this. also there are other OS contributions which we want to support and are awaiting longer.

Thank you for outlining the criteria for adding new OS support.

  1. Yes, Alibaba Cloud Linux (Alinux) is fully open source and free.
  2. While direct GitHub requests seem low, there is a massive user base on Alibaba Cloud (especially ACK users) who rely on Trivy. These users typically report issues to Alibaba Cloud support rather than upstream, masking the true demand. This PR aims to bridge that gap and enable accurate scanning for thousands of active cloud-native workloads.

We hope this clarifies the urgency and value of this contribution.

@github-actions

github-actions Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

This PR is stale because it has been labeled with inactivity.

@github-actions github-actions Bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and will be auto-closed. label May 2, 2026
@DmitriyLewen DmitriyLewen removed the lifecycle/stale Denotes an issue or PR has remained open with no activity and will be auto-closed. label May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@knqyf263 knqyf263 Awaiting requested review from knqyf263 knqyf263 is a code owner

@DmitriyLewen DmitriyLewen Awaiting requested review from DmitriyLewen DmitriyLewen is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@shiloong @DmitriyLewen @itaysk