Code

Add Trivy security scanner#21780

Code

Open

lilatomic wants to merge 34 commits intopantsbuild:mainpantsbuild/pants:mainfrom lilatomic:feature/trivy-0lilatomic/pants:feature/trivy-0Copy head branch name to clipboard

+1,168-41

Commits

Commits on Mar 9, 2025

• first pass at running Trivy on Docker targets

  lilatomic

  committed
  eba262f

  Copy full SHA for eba262f

• mv skip field

  lilatomic

  committed
  c2c11c6

  Copy full SHA for c2c11c6

• remove progress bars

  lilatomic

  committed
  2f8fda5

  Copy full SHA for 2f8fda5

• cache to Pants named caches

  Show description for d429180
  lilatomic

  committed
  d429180

  Copy full SHA for d429180

• tailor and lint

  lilatomic

  committed
  52a96aa

  Copy full SHA for 52a96aa

• load config files

  lilatomic

  committed
  1a6b7be

  Copy full SHA for 1a6b7be

• slight fix to docs on loading config files

  lilatomic

  committed
  d3b9f07

  Copy full SHA for d3b9f07

• add option for setting allowed severity options

  lilatomic

  committed
  6b5455c

  Copy full SHA for 6b5455c

• fix skip field

  lilatomic

  committed
  dadd20e

  Copy full SHA for dadd20e

• allow passing in command-specific arguments

  lilatomic

  committed
  9e3dffb

  Copy full SHA for 9e3dffb

• implement trivy for terraform

  lilatomic

  committed
  6fbae7d

  Copy full SHA for 6fbae7d

• add vars-file handling for trivy for terraform

  lilatomic

  committed
  76fd2b7

  Copy full SHA for 76fd2b7

• trivy can lint helm deployments

  lilatomic

  committed
  903fdd5

  Copy full SHA for 903fdd5

• trivy can lint helm charts too

  lilatomic

  committed
  253d276

  Copy full SHA for 253d276

• mv terraform_fieldset_to_init_request

  lilatomic

  committed
  eedb1a0

  Copy full SHA for eedb1a0

• rebuild terraform to allow extending to modules

  lilatomic

  committed
  387da98

  Copy full SHA for 387da98

• trivy can lint terraform modules

  lilatomic

  committed
  a9f7aba

  Copy full SHA for a9f7aba

• register skip fields

  lilatomic

  committed
  8251952

  Copy full SHA for 8251952

• use correct partitioner

  lilatomic

  committed
  235eafd

  Copy full SHA for 235eafd

• add test for trivy terraform

  lilatomic

  committed
  0d216ac

  Copy full SHA for 0d216ac

• do not forward vars files when running on terraform modules

  Show description for 0aa1e33
  lilatomic

  committed
  0aa1e33

  Copy full SHA for 0aa1e33

• add tests for docker

  lilatomic

  committed
  5b84240

  Copy full SHA for 5b84240

• rebuild trivy validation to use actual subcommand for parsing output

  lilatomic

  committed
  23bb781

  Copy full SHA for 23bb781

• add tests for trivy on helm

  lilatomic

  committed
  282b1a8

  Copy full SHA for 282b1a8

• # This is a combination of 2 commits.

  Show description for 4403b77
  lilatomic

  committed
  4403b77

  Copy full SHA for 4403b77

• fix heading level hierarchy and typo

  lilatomic

  committed
  b9a30f1

  Copy full SHA for b9a30f1

• improve assertions

  lilatomic

  committed
  0c3e0a3

  Copy full SHA for 0c3e0a3

• add to changelog

  lilatomic

  committed
  e108cb8

  Copy full SHA for e108cb8

• mark trivy linter as experimental in all backends

  lilatomic

  committed
  7193bf0

  Copy full SHA for 7193bf0

• fix typechecks

  lilatomic

  committed
  cacc326

  Copy full SHA for cacc326

• fix typo

  Show description for dac097c
  

  lilatomic

  and

  cburroughs

  committed
  dac097c

  Copy full SHA for dac097c

• increase timeout on test

  Show description for f2dc1da
  lilatomic

  committed
  f2dc1da

  Copy full SHA for f2dc1da

• new lints

  lilatomic

  committed
  b1c7c70

  Copy full SHA for b1c7c70

• allow more errors than expected to prevent break when new ones are detected

  lilatomic

  committed
  b9967f0

  Copy full SHA for b9967f0