aquasecurity trivy False-detection Discussions
False Detection Discussions
False positives/negatives
-
You must be logged in to vote Trivy suggest upgrading to a version that doesn't exist, but exist for a similar dependency
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote False positive for CVE-2023-33246 in apache/rocketmq:4.9.7
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote CVE-2023-0105 - request to update Trivy database impacting Keycloak
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote False positive for CVE-2023-1108 undertow-core
kind/security-advisoryCategorizes issue or PR as related to security advisories. -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote False Positive - Code scanning - CFT- SQS Queue Unencrypted Finding
scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote False positieve from incorrect terraform parsing for AVD-AWS-0107
scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote -
You must be logged in to vote CVE-2023-2976 (Guava vulnerability)
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote [Edge case] Missing key for fixed version
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote CVE-2023-33170 false positive in net 6.0.20 app
triage/duplicateIndicates an issue is a duplicate of other open issue.
