v0.21.2

[aqua-bot]

New features

Scan private git repositories

$ export GITHUB_TOKEN="your_private_github_token"
$ trivy repo <your private GitHub repo URL>

See here for more details.

Add IaC metadata

You will find Resource, StartLine and so on under IaCMetadata. It currently supports only Terraform and Cloudformation.

$ trivy conf -f json /path/to/iac_files
...
    {
      "Target": "configs/bucket.yaml",
      "Class": "config",
      "Type": "cloudformation",
      ...(snip)...
      "Misconfigurations": [
        {
          "Type": "Cloudformation Security Check powered by cfsec",
          "ID": "AVD-AWS-0086",
          "IacMetadata": {
            "Resource": "S3Bucket",
            "StartLine": 18,
            "EndLine": 18
          }
        },
    }

Bug fixes

Hook: exclude unrelated lib types from system files filtering (#1431)

SARIF: change help field in the sarif template. (#1423)

Changelog

7beed30 docs: provide more information on scanning Google's GCR (#1426)
f50e1f4 docs(misconfiguration): added instruction for misconfiguration detection (#1428)
3ae4de5 Update git-repository.md (#1430)
6e35b8f fix(hooks): exclude unrelated lib types from system files filtering (#1431)
beb60b0 chore: run go fmt (#1429)
582e7fd fix(sarif): change help field in the sarif template. (#1423)
11bc290 Update fanal with cfsec version update (#1425)
392f689 Replace deprecated option in goreleaser (#1406)
101d576 feat(alpine): support 3.15 (#1422)
bd3ba68 chore: test the helm chart in the PR and used the commit hash (#1414)
3860d6e chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
4f82673 chore(release): add ubuntu older versions to deploy script (#1416)

Docker images

• docker pull aquasec/trivy:0.21.2
• docker pull ghcr.io/aquasecurity/trivy:0.21.2
• docker pull public.ecr.aws/aquasecurity/trivy:0.21.2

---

This discussion was created from the release v0.21.2.