v0.21.0

[aqua-bot]

🚀 What's new? 🚀

🍣 CloudFormation Support 🍤

Scan CloudFormation template files for over 100 possible misconfigurations (#1360)

Trivy IaC scanning for both Terraform and CloudFormation runs the same checks for misconfiguration - now, regardless of your chosen IaC tooling, many issues will be identified.

To run use trivy conf <path/to/checks>

🐞 Bug fixes 🐛

fix(sarif): fix validation errors (#1376)

Use a stable SARIF identifier (#1230)

fix(python): fix parsing of requirements.txt with hash checking mode available in pip since version 8.0 (#1368)

Changelog

https://github.com/aquasecurity/trivy/releases/tag/v0.21.0

Docker images

• docker pull aquasec/trivy:0.21.0
• docker pull ghcr.io/aquasecurity/trivy:0.21.0
• docker pull public.ecr.aws/aquasecurity/trivy:0.21.0

---

This discussion was created from the release v0.21.0.