-
Notifications
You must be signed in to change notification settings - Fork 42
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump Trivy to v0.54.1 #2427
Bump Trivy to v0.54.1 #2427
Conversation
- Fix registry version aquasecurity/trivy#6219; \n- Fix replace zap with slog aquasecurity/trivy#6466; \n - The fix with slog used a zap to slog bridge (official from zap, but exp). It didn't have a license file, so I hardcoded a commit version that had; \n- Adopt opts.Align() to validate options object;
- Fix go clear cache aquasecurity/trivy#7010
- Fix --vuln-type flag renamed into --pkg-types aquasecurity/trivy#7104; \n- Adopt package relationships aquasecurity/trivy#7237
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. Freeing disk space on GH jobs seems like a necessity these days.
This pull request is now in conflicts. Could you fix it? 🙏
|
This pull request does not have a backport label. Could you fix it @romulets? 🙏
|
11b6c76
to
b6c76f6
Compare
📊 Allure Report - 💚 No failures were reported.
|
Summary of your changes
Bump trivy and fix breaking changes:
trivy-db
andtrivy-java-db
registries by default aquasecurity/trivy#6219;--vuln-type
flag to--pkg-types
flag aquasecurity/trivy#7104;--pkg-relationships
aquasecurity/trivy#7237Tested on EC2 instance and #2426 actions