Repository navigation
aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote -
You must be logged in to vote docs: warn that image scans can fill a tmpfs /tmp (RAM) β recommend setting TMPDIR
kind/documentationCategorizes issue or PR as related to documentation. -
You must be logged in to vote .NET single-file bundles are not analyzed: packages and bundled runtime are missing, so vulnerabilities in them are never reported
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote bun.lock with a git dependency from Bun 1.4 fails to parse, and the scan silently covers nothing
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote KSV-0039 flags every Kubernetes object when a LimitRange is in the same scan
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote MIT-0 License detected as unknown
kind/bugCategorizes issue or PR as related to a bug. scan/licenseIssues relating to license scanning -
You must be logged in to vote Detect Node.js CVE
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote -
You must be logged in to vote Can trivy analyze all VMDK files?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Exit 0 and no warning when no OS packages are detected, so --exit-code gates pass images Trivy could not read
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote -
You must be logged in to vote Detect packages from OndΕej SurΓ½'s PHP repositories (packages.sury.org, ppa:ondrej/php) as third-party
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Scan Local Image using Trivy
triage/supportIndicates an issue that is a support question. triage/needs-informationIndicates an issue needs more information in order to work on it. -
You must be logged in to vote OpenVEX statements whose product is the SBOM root component are ignored by
kind/bugtrivy sbomfor packages of other ecosystemsCategorizes issue or PR as related to a bug. -
You must be logged in to vote Windows: Support WSLC for local image scan
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote CycloneDX: an SBOM with OS packages of two types is rejected instead of being scanned
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote CycloneDX: an SBOM whose metadata component has type
kind/bugfirmwareis rejected with "unsupported type"Categorizes issue or PR as related to a bug. -
You must be logged in to vote Terraform: findings silently disappear when a module calls 33 or more submodules
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy detects packages in Red Hat Hardened Images (Hummingbird) but fails OS detection (family="none"), resulting in no vulnerability findings
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote trivy image fails to detect standalone compiled binary vulnerabilities in custom installation directories (e.g., /opt/package/bin/curl) while grype succeeds.
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Rescoring of vulnerabilities (severity modification) with VEX
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning
