Update to v0.57.0 #8
Commits on Jul 31, 2024
-
feat(vm): Support direct filesystem (aquasecurity#7058)
Signed-off-by: yusuke.koyoshi <[email protected]>
-
feat(cli)!: delete deprecated SBOM flags (aquasecurity#7266)
Signed-off-by: knqyf263 <[email protected]>
-
fix(plugin): do not call GitHub content API for releases and tags (aq…
…uasecurity#7274) Signed-off-by: knqyf263 <[email protected]>
-
fix(java): Return error when trying to find a remote pom to avoid seg…
…fault (aquasecurity#7275) Co-authored-by: DmitriyLewen <[email protected]>
Commits on Aug 2, 2024
-
refactor(misconf): remove file filtering from parsers (aquasecurity#7289
) Signed-off-by: nikpivkin <[email protected]>
-
feat(vuln): Add
--detection-priorityflag for accuracy tuning (aqua……security#7288) Signed-off-by: knqyf263 <[email protected]>
Commits on Aug 5, 2024
-
docs: add auto-generated config (aquasecurity#7261)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Aug 6, 2024
-
perf(misconf): do not convert contents of a YAML file to string (aqua…
…security#7292) Signed-off-by: nikpivkin <[email protected]>
-
refactor(misconf): remove unused universal scanner (aquasecurity#7293)
Signed-off-by: nikpivkin <[email protected]>
-
perf(misconf): use json.Valid to check validity of JSON (aquasecurity…
…#7308) Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): load only submodule if it is specified in source (aquas…
…ecurity#7112) Signed-off-by: nikpivkin <[email protected]>
-
feat(misconf): support for policy and bucket grants (aquasecurity#7284)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 7, 2024
-
fix(misconf): do not set default value for default_cache_behavior (aq…
…uasecurity#7234) Signed-off-by: nikpivkin <[email protected]>
-
feat(misconf): iterator argument support for dynamic blocks (aquasecu…
…rity#7236) Signed-off-by: nikpivkin <[email protected]> Co-authored-by: simar7 <[email protected]>
-
chore(deps): bump the common group across 1 directory with 7 updates (a…
…quasecurity#7305) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
docs: update client/server docs for misconf and license scanning (aqu…
…asecurity#7277) Signed-off-by: nikpivkin <[email protected]> Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Aug 8, 2024
-
docs: update links to packaging.python.org (aquasecurity#7318)
Signed-off-by: nikpivkin <[email protected]>
-
perf(misconf): optimize work with context (aquasecurity#6968)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 9, 2024
-
refactor: replace ftypes.Gradle with packageurl.TypeGradle (aquasecur…
…ity#7323) Signed-off-by: nikpivkin <[email protected]>
-
docs: update air-gapped docs (aquasecurity#7160)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Aug 14, 2024
Commits on Aug 15, 2024
-
chore(deps): bump the common group with 9 updates (aquasecurity#7333)
Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
fix(misconf): change default TLS values for the Azure storage account (…
…aquasecurity#7345) Signed-off-by: nikpivkin <[email protected]>
-
refactor(misconf): highlight only affected rows (aquasecurity#7310)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 20, 2024
-
fix(misconf): wrap Azure PortRange in iac types (aquasecurity#7357)
Signed-off-by: nikpivkin <[email protected]>
-
feat(misconf): scanning support for YAML and JSON (aquasecurity#7311)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 21, 2024
-
feat(misconf): variable support for Terraform Plan (aquasecurity#7228)
Signed-off-by: nikpivkin <[email protected]>
-
fix: safely check if the directory exists (aquasecurity#7353)
Signed-off-by: nikpivkin <[email protected]>
-
chore(deps): bump the aws group across 1 directory with 7 updates (aq…
…uasecurity#7358) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
feat(server): add internal
--path-prefixflag for client/server mode (aquasecurity#7321) Signed-off-by: knqyf263 <[email protected]>
Commits on Aug 22, 2024
-
chore(deps): bump trivy-checks (aquasecurity#7350)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 23, 2024
-
refactor(misconf): use slog (aquasecurity#7295)
Signed-off-by: nikpivkin <[email protected]>
-
feat(misconf): ignore duplicate checks (aquasecurity#7317)
Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): init frameworks before updating them (aquasecurity#7376)
Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): support deprecating for Go checks (aquasecurity#7377)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 24, 2024
Commits on Aug 27, 2024
-
fix(misconf): use module to log when metadata retrieval fails (aquase…
…curity#7405) Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 28, 2024
-
feat(misconf): support for ignore by nested attributes (aquasecurity#…
…7205) Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): do not filter Terraform plan JSON by name (aquasecurity…
…#7406) Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 29, 2024
-
feat(misconf): port and protocol support for EC2 networks (aquasecuri…
…ty#7146) Signed-off-by: nikpivkin <[email protected]>
-
chore: update CODEOWNERS (aquasecurity#7398)
Signed-off-by: knqyf263 <[email protected]>
-
feat(report): export modified findings in JSON (aquasecurity#7383)
Signed-off-by: knqyf263 <[email protected]>
-
fix(misconf): do not register Rego libs in checks registry (aquasecur…
…ity#7420) Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 30, 2024
-
chore(deps): Bump trivy-checks (aquasecurity#7417)
Signed-off-by: nikpivkin <[email protected]> Co-authored-by: nikpivkin <[email protected]>
-
fix(misconf): do not recreate filesystem map (aquasecurity#7416)
Signed-off-by: nikpivkin <[email protected]>
Commits on Aug 31, 2024
-
fix(misconf): fix infer type for null value (aquasecurity#7424)
Signed-off-by: nikpivkin <[email protected]>
Commits on Sep 2, 2024
-
fix(aws): handle ECR repositories in different regions (aquasecurity#…
…6217) Signed-off-by: Kevin Conner <[email protected]>
-
fix: logger initialization before flags parsing (aquasecurity#7372)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
-
Commits on Sep 3, 2024
-
feat(sbom): set User-Agent header on requests to Rekor (aquasecurity#…
…7396) Signed-off-by: Bob Callaway <[email protected]>
-
fix(helm): explicitly define
kindandapiVersionof `volumeClaimT……emplate` element (aquasecurity#7362)
-
chore(deps): Bump trivy-checks and pin OPA (aquasecurity#7427)
Signed-off-by: nikpivkin <[email protected]> Co-authored-by: nikpivkin <[email protected]>
-
Commits on Sep 5, 2024
-
fix(license): stop spliting a long license text (aquasecurity#7336)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Sep 6, 2024
-
refactor(java): add error/statusCode for logs when we can't get pom.x…
…ml/maven-metadata.xml from remote repo (aquasecurity#7451)
-
-
chore(deps): bump the common group across 1 directory with 19 updates (…
…aquasecurity#7436) Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: knqyf263 <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: knqyf263 <[email protected]>
Commits on Sep 10, 2024
-
chore(deps): bump the aws group with 6 updates (aquasecurity#7468)
Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Sep 11, 2024
-
fix(report): change a receiver of MarshalJSON (aquasecurity#7483)
Signed-off-by: knqyf263 <[email protected]>
-
fix(report): fix error with unmarshal of `ExperimentalModifiedFinding…
…s` (aquasecurity#7463) Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
-
docs(oci): Add a note About the expected Media Type for the Trivy-DB …
…OCI Artifact (aquasecurity#7449)
-
feat(license): improve license normalization (aquasecurity#7131)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: DmitriyLewen <[email protected]> Co-authored-by: knqyf263 <[email protected]>
3 people authoredSep 11, 2024 -
docs(db): add a manifest example (aquasecurity#7485)
Signed-off-by: knqyf263 <[email protected]>
Commits on Sep 12, 2024
-
docs: refine go docs (aquasecurity#7442)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Sep 16, 2024
-
chore(vex): suppress openssl vulnerabilities (aquasecurity#7500)
Signed-off-by: knqyf263 <[email protected]>
-
chore(vex): add
CVE-2024-34155,CVE-2024-34156andCVE-2024-34158…… in `trivy.openvex.json` (aquasecurity#7510)
-
fix(java): use
dependencyManagementfrom root/child pom's for depen……dencies from parents (aquasecurity#7497)
Commits on Sep 17, 2024
Commits on Sep 18, 2024
-
chore(deps): bump go-ebs-file (aquasecurity#7513)
Signed-off-by: nikpivkin <[email protected]>
-
fix(sbom): parse type
frameworkaslibrarywhen unmarshalling `Cy……cloneDX` files (aquasecurity#7527)
-
refactor(misconf): pass options to Rego scanner as is (aquasecurity#7529
) Signed-off-by: nikpivkin <[email protected]>
Commits on Sep 19, 2024
-
fix(sbom): export bom-ref when converting a package to a component (a…
…quasecurity#7340) Signed-off-by: knqyf263 <[email protected]> Co-authored-by: amf <[email protected]> Co-authored-by: knqyf263 <[email protected]>
3 people authoredSep 19, 2024
Commits on Sep 20, 2024
-
perf(misconf): use port ranges instead of enumeration (aquasecurity#7549
) Signed-off-by: nikpivkin <[email protected]>
Commits on Sep 23, 2024
Commits on Sep 26, 2024
-
chore(deps): bump the common group across 1 directory with 20 updates (…
…aquasecurity#7604) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: knqyf263 <[email protected]>
Commits on Sep 27, 2024
-
fix: allow access to '..' in mapfs (aquasecurity#7575)
Signed-off-by: nikpivkin <[email protected]>
-
test: use a local registry for remote scanning (aquasecurity#7607)
Signed-off-by: knqyf263 <[email protected]>
Commits on Sep 28, 2024
-
fix(misconf): escape all special sequences (aquasecurity#7558)
Signed-off-by: nikpivkin <[email protected]>
-
feat(misconf): add ability to disable checks by ID (aquasecurity#7536)
Signed-off-by: nikpivkin <[email protected]> Co-authored-by: Simar <[email protected]>
Commits on Sep 29, 2024
-
feat(suse): added SUSE Linux Enterprise Micro support (aquasecurity#7294
) Signed-off-by: Marcus Meissner <[email protected]> Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
Commits on Sep 30, 2024
-
fix(misconf): disable DS016 check for image history analyzer (aquasec…
…urity#7540) Signed-off-by: nikpivkin <[email protected]>
-
refactor: fix auth error handling (aquasecurity#7615)
Signed-off-by: knqyf263 <[email protected]>
-
feat(secret): enhance secret scanning for python binary files (aquase…
…curity#7223) Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
-
feat(java): add empty versions if
pom.xmldependency versions can't…… be detected (aquasecurity#7520) Co-authored-by: Teppei Fukuda <[email protected]>
Commits on Oct 1, 2024
-
test: use loaded image names (aquasecurity#7617)
Signed-off-by: knqyf263 <[email protected]>
-
-
feat: support multiple DB repositories for vulnerability and Java DB (a…
…quasecurity#7605) Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 2, 2024
-
feat(misconf): Support
--skip-*for all included modules (aquasecur……ity#7579) Signed-off-by: nikpivkin <[email protected]> Co-authored-by: nikpivkin <[email protected]>
-
chore: add prefixes to log messages (aquasecurity#7625)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: simar7 <[email protected]>
-
feat: support RPM archives (aquasecurity#7628)
Signed-off-by: knqyf263 <[email protected]>
Commits on Oct 3, 2024
-
fix(misconf): not to warn about missing selectors of libraries (aquas…
…ecurity#7638) Signed-off-by: nikpivkin <[email protected]>
-
-
fix(db): fix javadb downloading error handling (aquasecurity#7642)
Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 7, 2024
-
fix(report): Fix invalid URI in SARIF report (aquasecurity#7645)
Co-authored-by: DmitriyLewen <[email protected]>
-
fix(redhat): include arch in PURL qualifiers (aquasecurity#7654)
Signed-off-by: knqyf263 <[email protected]>
Commits on Oct 9, 2024
-
fix(sbom): add options for DBs in private registries (aquasecurity#7660)
Signed-off-by: knqyf263 <[email protected]>
-
feat(cli): add
trivy auth(aquasecurity#7664)Signed-off-by: knqyf263 <[email protected]> Co-authored-by: DmitriyLewen <[email protected]>
Commits on Oct 10, 2024
-
fix(cli):
clean --alldeletes only relevant dirs (aquasecurity#7704)Signed-off-by: knqyf263 <[email protected]>
Commits on Oct 11, 2024
-
refactor(misconf): introduce generic scanner (aquasecurity#7515)
Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 14, 2024
-
docs: apt-transport-https is a transitional package (aquasecurity#7678)
Signed-off-by: Simon Deziel <[email protected]>
Commits on Oct 15, 2024
-
feat(cli): rename
trivy authtotrivy registry(aquasecurity#7727)Signed-off-by: knqyf263 <[email protected]>
Commits on Oct 16, 2024
-
feat(misconf): public network support for Azure Storage Account (aqua…
…security#7601) Signed-off-by: nikpivkin <[email protected]>
-
docs: add note about disabled DS016 check (aquasecurity#7724)
Signed-off-by: nikpivkin <[email protected]>
-
test: define constants for test images (aquasecurity#7739)
Signed-off-by: knqyf263 <[email protected]> Co-authored-by: DmitriyLewen <[email protected]>
Commits on Oct 17, 2024
-
feat(misconf): ssl_mode support for GCP SQL DB instance (aquasecurity…
…#7564) Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): change default ACL of digitalocean_spaces_bucket to pri…
…vate (aquasecurity#7577) Signed-off-by: nikpivkin <[email protected]>
-
fix(misconf): check if property is not nil before conversion (aquasec…
…urity#7578) Signed-off-by: nikpivkin <[email protected]>
-
fix(java): correctly inherit
versionandscopefrom upper/root `d……epManagement` and `dependencies` into parents (aquasecurity#7541) Signed-off-by: knqyf263 <[email protected]> Co-authored-by: knqyf263 <[email protected]>
-
test: use forked images (aquasecurity#7755)
Signed-off-by: knqyf263 <[email protected]>
-
feat(parser): ignore white space in pom.xml files (aquasecurity#7747)
Signed-off-by: Samuel Gaist <[email protected]>
-
refactor(misconf): simplify k8s scanner (aquasecurity#7717)
Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 18, 2024
-
fix(misconf): fix for Azure Storage Account network acls adaptation (a…
…quasecurity#7602) Signed-off-by: nikpivkin <[email protected]>
-
feat(cyclonedx): add file checksums to
CycloneDXreports (aquasecur……ity#7507) Co-authored-by: knqyf263 <[email protected]>
Commits on Oct 19, 2024
-
fix(misconf): properly expand dynamic blocks (aquasecurity#7612)
Signed-off-by: nikpivkin <[email protected]> Co-authored-by: Simar <[email protected]>
Commits on Oct 21, 2024
-
fix: enable usestdlibvars linter (aquasecurity#7770)
Signed-off-by: Matthieu MOREL <[email protected]>
-
feat(misconf): export unresolvable field of IaC types to Rego (aquase…
…curity#7765) Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 23, 2024
Commits on Oct 24, 2024
Commits on Oct 25, 2024
Commits on Oct 28, 2024
Commits on Oct 29, 2024
-
-
fix(k8s)!: support k8s multi container (aquasecurity#7444)
Co-authored-by: afdesk <[email protected]>
-
refactor(misconf): Deprecate
EXCEPTIONSfor misconfiguration scanni……ng (aquasecurity#7776) Signed-off-by: Simar <[email protected]>
-
fix(helm): properly handle multiple archived dependencies (aquasecuri…
…ty#7782) Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 30, 2024
-
fix(cli): add config name to skip-policy-update alias (aquasecurity#7820
) Signed-off-by: nikpivkin <[email protected]>
Commits on Oct 31, 2024
-
fix(go): Do not trim v prefix from versions in Go Mod Analyzer (aquas…
…ecurity#7733) Co-authored-by: DmitriyLewen <[email protected]>
-
-
docs: add example of creating whitelist of checks (aquasecurity#7821)
Signed-off-by: nikpivkin <[email protected]>
-
feat(db): append errors (aquasecurity#7843)
Signed-off-by: knqyf263 <[email protected]>
-
chore: lint
errors.Join(aquasecurity#7845)Signed-off-by: knqyf263 <[email protected]>
Commits on Nov 1, 2024
Commits on Nov 4, 2024
-
chore: bump golangci-lint to v1.61.0 (aquasecurity#7853)
Signed-off-by: knqyf263 <[email protected]>
-
chore(deps): bump the github-actions group across 1 directory with 2 …
…updates (aquasecurity#7854) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 5, 2024
-
refactor(secret): optimize performance by moving ToLower operation ou…
…tside loop (aquasecurity#7862)
-
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (a…
…quasecurity#7868) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 6, 2024
-
chore: bump containerd to v2.0.0 (aquasecurity#7875)
Signed-off-by: knqyf263 <[email protected]>
-
chore(deps): bump the common group across 1 directory with 20 updates (…
…aquasecurity#7876) Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: knqyf263 <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: knqyf263 <[email protected]>
Commits on Nov 7, 2024
Commits on Nov 8, 2024
-
fix(misconf): handle null properties in CloudFormation templates (aqu…
…asecurity#7813) Signed-off-by: nikpivkin <[email protected]>
Commits on Nov 11, 2024
-
chore(k8s): enhance k8s scan log (aquasecurity#6997)
Co-authored-by: afdesk <[email protected]>
