Repository navigation
aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote OpenVEX statements whose product is the SBOM root component are ignored by
kind/bugtrivy sbomfor packages of other ecosystemsCategorizes issue or PR as related to a bug. -
You must be logged in to vote CycloneDX: an SBOM with OS packages of two types is rejected instead of being scanned
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote CycloneDX: an SBOM whose metadata component has type
kind/bugfirmwareis rejected with "unsupported type"Categorizes issue or PR as related to a bug. -
You must be logged in to vote Terraform: findings silently disappear when a module calls 33 or more submodules
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy detects packages in Red Hat Hardened Images (Hummingbird) but fails OS detection (family="none"), resulting in no vulnerability findings
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote trivy image fails to detect standalone compiled binary vulnerabilities in custom installation directories (e.g., /opt/package/bin/curl) while grype succeeds.
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Rescoring of vulnerabilities (severity modification) with VEX
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Publisher provenance and authenticated update time for a retained trivy-db manifest
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote -
You must be logged in to vote Support Echo Language Package Scanning
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote -
You must be logged in to vote NuGet: bracketed versions in Directory.Packages.props are not parsed, vulnerabilities are missed
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote PEP 751 workflow requirements when dependency relationships are absent
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote -
You must be logged in to vote Questions on the possible inclusion of euvd as a datasource
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote False Positive: GO-2026-5932 incorrectly flags golang.org/x/crypto even if openpgp subpackage is not used
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote DS031 is being incorrectly detected in a Dockerfile
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Non-deterministic purl for Wolfi packages discovered via
kind/bug/var/lib/db/sbom(two apk components per SPDX document)Categorizes issue or PR as related to a bug. -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Supported provenance treatment for an honestly identified braces prerelease backport
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Debian SID Scan Shows 0 Vulnerabilities
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote False positive AVD-AZU-0013: Key Vault flagged despite explicitly setting network ACL defaultAction to Deny
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote AWS-0004 misses API Gateway root methods in CloudFormation and Terraform
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning
