aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote Trivy 0.59.1 detects false positive CVE-2025-25193 against netty-common-4.1.118.Final.jar
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Improving Performance - Maven Artifact Caching
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Add support for the Mageia distribution
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote Golang: Resultant version and purls drop v from component in cyclonedx sbom.
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote CVE-2023-47100 is missing in trivy for Perl while syft reports it for the same Debian docker image
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Trivy Not Detecting AWS OpenSearch Encryption At-Rest Misconfiguration - Terraform
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy fails to parse Rancher binary's -ldflags due to unsupported flags like -extldflags
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Failed to expand block. Invalid 'for-each' argument
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Questions about the file to be analyzed
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote
kind/bugtrivy registry loginfails for docker.io with "unknown resource type" errorCategorizes issue or PR as related to a bug. -
You must be logged in to vote CVE Detection on VSCode Extension
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Understanding how CVE severity is defined
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Panic when scanning simple SPDX sbom created by syft
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote The Date/Time in the log files do not reflect the actual clock.Now
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Scanning a repository does not pick up any licenses
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Full license scan only returns results when
triage/support--formatnot setIndicates an issue that is a support question. scan/licenseIssues relating to license scanning -
You must be logged in to vote ZIP Extraction during SBOM Generation
kind/featureCategorizes issue or PR as related to a new feature. -
You must be logged in to vote -
You must be logged in to vote CycloneDX report doesn't seem to have the correct license information
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Maven: Trivy reports vulnerability based on wrong dependency version
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Temporary source list messed up the image scan detection
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote trivy maven repo access behind firewall
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote SBOM documentation page is unclear
kind/documentationCategorizes issue or PR as related to documentation. -
You must be logged in to vote Issues with .trivyignore working with trivy server integration within Dependency-Track
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote k8s KBOM is not generating proper PURL as versions are missing
kind/bugCategorizes issue or PR as related to a bug.
