Repository navigation
aquasecurity trivy Discussions
Discussions
-
You must be logged in to vote Support Echo Language Package Scanning
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote False Positive: GO-2026-5932 incorrectly flags golang.org/x/crypto even if openpgp subpackage is not used
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Exit 0 and no warning when no OS packages are detected, so --exit-code gates pass images Trivy could not read
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote feat(db): allow the client to set a maximum DB age instead of relying on the 24h NextUpdate
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Support containerd-style registry mirrors (?ns= query parameter) for registry.mirrors
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote bug: Trivy fails if credentials for registry contain a ","
target/container-imageIssues relating to container image scanning -
You must be logged in to vote Detect manually installed Node.js runtimes and report Node.js core vulnerabilities
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote trivy image and fs scan produce different results on the same files
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning target/filesystemIssues relating to filesystem scanning -
You must be logged in to vote vex repo: trigger all locations.url[] irrespective of fallback mechanism
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Duplicate components & dependencies in BOM
scan/sbomIssues relating to SBOM target/container-imageIssues relating to container image scanning -
You must be logged in to vote
scan/vulnerabilitytrivy imagesilently falls back topackage.jsonwhenyarn.lockcontains SSH git dependencies -trivy fshandles the same file properlyIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Inconsistent library detection inside 3rd party packages between RHEL and Ubuntu
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote misconfig scanner panics on images with a HEALTHCHECK history line but no Healthcheck config
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Support for Hadron Linux (musl-based immutable distro, used by Kairos) in Trivy
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote False positive CVE-2025-35036 — hibernate-validator 6.0.23.SP1-redhat-00001 flagged but Red Hat backported the fix
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Can't scan
target/container-imageIssues relating to container image scanning -
You must be logged in to vote CycloneDX export of redhat/ubi10-minimal produces cyclic dependencies
target/container-imageIssues relating to container image scanning -
You must be logged in to vote Adding EPSS and KEV databases
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote how to find packagePath while scaning docker image
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote scanning AppImage desktop application artifacts without executing them
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Scanning a local image
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote oras attached VEX attestation not found by Trivy
scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Trivy scanner should detect Chiselled Ubuntu images and installed packages
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Plugin Idea: Local AI agent to summarize and prioritize Trivy scan results
kind/featureCategorizes issue or PR as related to a new feature. scan/vulnerabilityIssues relating to vulnerability scanning target/container-imageIssues relating to container image scanning -
You must be logged in to vote Add riscv64 to release binaries and Docker images
kind/featureCategorizes issue or PR as related to a new feature. target/container-imageIssues relating to container image scanning
