alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Activity
6,619 Commits 12 Branches 0 Tags
31f86043b1f772d3fd93ad00ae171a8217918bd9
Commit Graph

36 Commits

Author SHA1 Message Date
Renovate Bot
c7f1cde10a Update mirror.gcr.io/aquasec/trivy Docker tag to v0.65.0 (#1073)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 8s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.64.1` -> `0.65.0` |

---

### Release Notes

<details>
<summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary>

### [`v0.65.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0650-2025-07-30)

[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.1...v0.65.0)

##### Features

- add graceful shutdown with signal handling ([#&#8203;9242](https://github.com/aquasecurity/trivy/issues/9242)) ([2c05882](2c05882f45))
- add HTTP request/response tracing support ([#&#8203;9125](https://github.com/aquasecurity/trivy/issues/9125)) ([aa5b32a](aa5b32a19f))
- **alma:** add AlmaLinux 10 support ([#&#8203;9207](https://github.com/aquasecurity/trivy/issues/9207)) ([861d51e](861d51e99a))
- **flag:** add schema validation for `--server` flag ([#&#8203;9270](https://github.com/aquasecurity/trivy/issues/9270)) ([ed4640e](ed4640ec27))
- **image:** add Docker context resolution ([#&#8203;9166](https://github.com/aquasecurity/trivy/issues/9166)) ([99cd4e7](99cd4e776c))
- **license:** observe pkg types option in license scanner ([#&#8203;9091](https://github.com/aquasecurity/trivy/issues/9091)) ([d44af8c](d44af8cfa2))
- **misconf:** add private ip google access attribute to subnetwork ([#&#8203;9199](https://github.com/aquasecurity/trivy/issues/9199)) ([263845c](263845cfc1))
- **misconf:** added logging and versioning to the gcp storage bucket ([#&#8203;9226](https://github.com/aquasecurity/trivy/issues/9226)) ([110f80e](110f80ea29))
- **repo:** add git repository metadata to reports ([#&#8203;9252](https://github.com/aquasecurity/trivy/issues/9252)) ([f4b2cf1](f4b2cf10e9))
- **report:** add CVSS vectors in sarif report ([#&#8203;9157](https://github.com/aquasecurity/trivy/issues/9157)) ([60723e6](60723e6cfc))
- **sbom:** add SHA-512 hash support for CycloneDX SBOM ([#&#8203;9126](https://github.com/aquasecurity/trivy/issues/9126)) ([12d6706](12d6706961))

##### Bug Fixes

- **alma:** parse epochs from rpmqa file ([#&#8203;9101](https://github.com/aquasecurity/trivy/issues/9101)) ([82db2fc](82db2fcc80))
- also check `filepath` when removing duplicate packages ([#&#8203;9142](https://github.com/aquasecurity/trivy/issues/9142)) ([4d10a81](4d10a815dd))
- **aws:** update amazon linux 2 EOL date ([#&#8203;9176](https://github.com/aquasecurity/trivy/issues/9176)) ([0ecfed6](0ecfed6ea7))
- **cli:** Add more non-sensitive flags to telemetry ([#&#8203;9110](https://github.com/aquasecurity/trivy/issues/9110)) ([7041a39](7041a39bdc))
- **cli:** ensure correct command is picked by telemetry ([#&#8203;9260](https://github.com/aquasecurity/trivy/issues/9260)) ([b4ad00f](b4ad00f301))
- **cli:** panic: attempt to get os.Args\[1] when len(os.Args) < 2 ([#&#8203;9206](https://github.com/aquasecurity/trivy/issues/9206)) ([adfa879](adfa879e4e))
- **license:** add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping ([#&#8203;9116](https://github.com/aquasecurity/trivy/issues/9116)) ([a692f29](a692f296d1))
- **license:** handle WITH operator for `LaxSplitLicenses` ([#&#8203;9232](https://github.com/aquasecurity/trivy/issues/9232)) ([b4193d0](b4193d0d31))
- migrate from `*.list` to `*.md5sums` files for `dpkg` ([#&#8203;9131](https://github.com/aquasecurity/trivy/issues/9131)) ([f224de3](f224de3e39))
- **misconf:** correctly adapt azure storage account ([#&#8203;9138](https://github.com/aquasecurity/trivy/issues/9138)) ([51aa022](51aa022260))
- **misconf:** correctly parse empty port ranges in google\_compute\_firewall ([#&#8203;9237](https://github.com/aquasecurity/trivy/issues/9237)) ([77bab7b](77bab7b6d2))
- **misconf:** fix log bucket in schema ([#&#8203;9235](https://github.com/aquasecurity/trivy/issues/9235)) ([7ebc129](7ebc129ab7))
- **misconf:** skip rewriting expr if attr is nil ([#&#8203;9113](https://github.com/aquasecurity/trivy/issues/9113)) ([42ccd3d](42ccd3df9a))
- **nodejs:** don't use prerelease logic for compare npm constraints  ([#&#8203;9208](https://github.com/aquasecurity/trivy/issues/9208)) ([fe96436](fe96436b99))
- prevent graceful shutdown message on normal exit ([#&#8203;9244](https://github.com/aquasecurity/trivy/issues/9244)) ([6095984](6095984d53))
- **rootio:** check full version to detect `root.io` packages ([#&#8203;9117](https://github.com/aquasecurity/trivy/issues/9117)) ([c2ddd44](c2ddd44d98))
- **rootio:** fix severity selection ([#&#8203;9181](https://github.com/aquasecurity/trivy/issues/9181)) ([6fafbeb](6fafbeb606))
- **sbom:** merge in-graph and out-of-graph OS packages in scan results ([#&#8203;9194](https://github.com/aquasecurity/trivy/issues/9194)) ([aa944cc](aa944cc6da))
- **sbom:** use correct field for licenses in CycloneDX reports ([#&#8203;9057](https://github.com/aquasecurity/trivy/issues/9057)) ([143da88](143da88dd8))
- **secret:** add UTF-8 validation in secret scanner to prevent protobuf marshalling errors ([#&#8203;9253](https://github.com/aquasecurity/trivy/issues/9253)) ([54832a7](54832a77b5))
- **secret:** fix line numbers for multiple-line secrets ([#&#8203;9104](https://github.com/aquasecurity/trivy/issues/9104)) ([e579746](e57974649e))
- **server:** add HTTP transport setup to server mode ([#&#8203;9217](https://github.com/aquasecurity/trivy/issues/9217)) ([1163b04](1163b044c7))
- supporting .egg-info/METADATA in python.Packaging analyzer ([#&#8203;9151](https://github.com/aquasecurity/trivy/issues/9151)) ([e306e2d](e306e2dc52))
- **terraform:** `for_each` on a map returns a resource for every key ([#&#8203;9156](https://github.com/aquasecurity/trivy/issues/9156)) ([153318f](153318f65f))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1073
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-07-31 15:10:56 +00:00
Renovate Bot
a55c150931 Update Helm release trivy-operator to v0.29.3
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
Details
lint-test-helm / helm-lint (pull_request) Successful in 7s
Details
lint-test-helm / helm-lint (push) Successful in 8s
Details
process-pull-requests / process-pull-requests (push) Failing after 11s
Details
process-issues / process-issues (push) Failing after 13s
Details
renovate / renovate (push) Successful in 1m42s
Details
2025-07-11 23:01:12 +00:00
Renovate Bot
071ddd31a3 Update Helm release trivy-operator to v0.29.2
All checks were successful
renovate / renovate (push) Successful in 5m34s
Details
lint-test-helm / helm-lint (push) Successful in 10s
Details
renovate/stability-days Updates have met minimum release age requirement
Details
lint-test-helm / helm-lint (pull_request) Successful in 27s
Details
2025-07-09 08:01:33 +00:00
Alex Lebens
f67e39ebaa add toleration
All checks were successful
lint-test-helm / helm-lint (push) Successful in 14s
Details
renovate / renovate (push) Successful in 2m19s
Details
2025-07-08 21:27:25 -05:00
Renovate Bot
12831ad36e Update mirror.gcr.io/aquasec/trivy Docker tag to v0.64.1 (#812)
Some checks failed
renovate / renovate (push) Has been cancelled
Details
lint-test-helm / helm-lint (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.63.0` -> `0.64.1` |

---

### Release Notes

<details>
<summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary>

### [`v0.64.1`](https://github.com/aquasecurity/trivy/releases/tag/v0.64.1)

[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.0...v0.64.1)

#### Changelog

- [`86ee3c1`](86ee3c1176) release: v0.64.1 \[release/v0.64] ([#&#8203;9122](https://github.com/aquasecurity/trivy/issues/9122))
- [`4e12722`](4e1272283a) fix(misconf): skip rewriting expr if attr is nil \[backport: release/v0.64] ([#&#8203;9127](https://github.com/aquasecurity/trivy/issues/9127))
- [`9a7d384`](9a7d38432c) fix(cli): Add more non-sensitive flags to telemetry \[backport: release/v0.64] ([#&#8203;9124](https://github.com/aquasecurity/trivy/issues/9124))
- [`53adfba`](53adfba3c2) fix(rootio): check full version to detect `root.io` packages \[backport: release/v0.64] ([#&#8203;9120](https://github.com/aquasecurity/trivy/issues/9120))
- [`8cf1bf9`](8cf1bf9f6f) fix(alma): parse epochs from rpmqa file \[backport: release/v0.64] ([#&#8203;9119](https://github.com/aquasecurity/trivy/issues/9119))

### [`v0.64.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0640-2025-06-30)

[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.63.0...v0.64.0)

##### Features

- **cli:** add version constraints to annoucements ([#&#8203;9023](https://github.com/aquasecurity/trivy/issues/9023)) ([19efa9f](19efa9fd37))
- **java:** dereference all maven settings.xml env placeholders ([#&#8203;9024](https://github.com/aquasecurity/trivy/issues/9024)) ([5aade69](5aade698c7))
- **misconf:** add OpenTofu file extension support ([#&#8203;8747](https://github.com/aquasecurity/trivy/issues/8747)) ([57801d0](57801d0324))
- **misconf:** normalize CreatedBy for buildah and legacy docker builder ([#&#8203;8953](https://github.com/aquasecurity/trivy/issues/8953)) ([65e155f](65e155fdaf))
- **redhat:** Add EOL date for RHEL 10. ([#&#8203;8910](https://github.com/aquasecurity/trivy/issues/8910)) ([48258a7](48258a701a))
- reject unsupported artifact types in remote image retrieval ([#&#8203;9052](https://github.com/aquasecurity/trivy/issues/9052)) ([1e1e1b5](1e1e1b5fa6))
- **sbom:** add manufacturer field to CycloneDX tools metadata ([#&#8203;9019](https://github.com/aquasecurity/trivy/issues/9019)) ([41d0f94](41d0f949c8))
- **terraform:** add partial evaluation for policy templates ([#&#8203;8967](https://github.com/aquasecurity/trivy/issues/8967)) ([a9f7dcd](a9f7dcdb9c))
- **ubuntu:** add end of life date for Ubuntu 25.04 ([#&#8203;9077](https://github.com/aquasecurity/trivy/issues/9077)) ([367564a](367564a3be))
- **ubuntu:** add eol date for 20.04-ESM ([#&#8203;8981](https://github.com/aquasecurity/trivy/issues/8981)) ([87118a0](87118a0ec4))
- **vuln:** add Root.io support for container image scanning ([#&#8203;9073](https://github.com/aquasecurity/trivy/issues/9073)) ([3a0ec0f](3a0ec0f2ac))

##### Bug Fixes

- Add missing version check flags ([#&#8203;8951](https://github.com/aquasecurity/trivy/issues/8951)) ([ef5f8de](ef5f8de8da))
- **cli:** add some values to the telemetry call ([#&#8203;9056](https://github.com/aquasecurity/trivy/issues/9056)) ([fd2bc91](fd2bc91e13))
- Correctly check for semver versions for trivy version check ([#&#8203;8948](https://github.com/aquasecurity/trivy/issues/8948)) ([b813527](b813527449))
- don't show corrupted trivy-db warning for first run ([#&#8203;8991](https://github.com/aquasecurity/trivy/issues/8991)) ([4ed78e3](4ed78e39af))
- **misconf:** .Config.User always takes precedence over USER in .History ([#&#8203;9050](https://github.com/aquasecurity/trivy/issues/9050)) ([371b8cc](371b8cc02f))
- **misconf:** correct Azure value-to-time conversion in AsTimeValue ([#&#8203;9015](https://github.com/aquasecurity/trivy/issues/9015)) ([40d017b](40d017b67d))
- **misconf:** move disabled checks filtering after analyzer scan ([#&#8203;9002](https://github.com/aquasecurity/trivy/issues/9002)) ([a58c36d](a58c36de12))
- **misconf:** reduce log noise on incompatible check ([#&#8203;9029](https://github.com/aquasecurity/trivy/issues/9029)) ([99c5151](99c5151d6e))
- **nodejs:** correctly parse `packages` array of `bun.lock` file ([#&#8203;8998](https://github.com/aquasecurity/trivy/issues/8998)) ([875ec3a](875ec3a9d2))
- **report:** don't panic when report contains vulns, but doesn't contain packages for `table` format ([#&#8203;8549](https://github.com/aquasecurity/trivy/issues/8549)) ([87fda76](87fda76f38))
- **sbom:** remove unnecessary OS detection check in SBOM decoding ([#&#8203;9034](https://github.com/aquasecurity/trivy/issues/9034)) ([198789a](198789a07b))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #812
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-07-05 04:54:50 +00:00
Alex Lebens
2a4adef031 disable vul scanner
Some checks failed
lint-test-helm / helm-lint (push) Failing after 44s
Details
renovate / renovate (push) Successful in 1m52s
Details
2025-06-20 12:03:34 -05:00
Alex Lebens
341cbf80da remove mount
Some checks failed
lint-test-helm / helm-lint (push) Failing after 6s
Details
renovate / renovate (push) Successful in 1m55s
Details
2025-06-20 11:23:29 -05:00
Alex Lebens
c53a97aaea remove mount
Some checks failed
lint-test-helm / helm-lint (push) Failing after 7s
Details
renovate / renovate (push) Successful in 1m21s
Details
2025-06-20 11:13:57 -05:00
Alex Lebens
3b1f0099fe change namespace
Some checks failed
lint-test-helm / helm-lint (push) Failing after 5s
Details
renovate / renovate (push) Successful in 1m22s
Details
2025-06-20 11:02:06 -05:00
Renovate Bot
982dccb364 Update Helm release trivy-operator to v0.29.1
Some checks failed
renovate / renovate (push) Has been cancelled
Details
lint-test-helm / helm-lint (push) Failing after 5s
Details
renovate/stability-days Updates have not met minimum release age requirement
Details
lint-test-helm / helm-lint (pull_request) Successful in 9s
Details
2025-06-19 03:20:48 +00:00
Renovate Bot
36b90765a7 Update Helm release trivy-operator to v0.29.0
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
lint-test-helm / helm-lint (pull_request) Successful in 7s
Details
2025-06-11 14:02:43 +00:00
Alex Lebens
6687200c71 enable other scanners
All checks were successful
renovate / renovate (push) Successful in 1m28s
Details
2025-06-05 12:16:47 -05:00
Renovate Bot
bba062401d Update mirror.gcr.io/aquasec/trivy Docker tag to v0.63.0
All checks were successful
lint-and-test-charts / lint-test (pull_request) Successful in 40s
Details
2025-06-05 04:37:18 +00:00
Alex Lebens
170811acf6 fix path
Some checks failed
renovate / renovate (push) Has been cancelled
Details
2025-06-04 21:38:40 -05:00
Alex Lebens
58f4a8a29b add trivy
Some checks failed
renovate / renovate (push) Has been cancelled
Details
2025-06-04 21:38:03 -05:00
alexlebens
992704e455 remove trivy 2024-08-12 13:14:45 -05:00
alexlebens
022107933e add trivy 2024-08-11 16:21:19 -05:00
alexlebens
e7f21018df remove trivy 2024-08-08 11:57:37 -05:00
renovate[bot]
b77dd00344 Update ghcr.io/aquasecurity/trivy Docker tag to v0.54.1 2024-08-01 03:38:42 +00:00
alexlebens
e0d75229dd add toleration for control plane 2024-07-12 16:38:10 -05:00
alexlebens
11c8d1ec62 remove namespace limits 2024-07-12 16:28:40 -05:00
alexlebens
a7dc98879e fix whitespace 2024-07-12 16:22:35 -05:00
alexlebens
a9c48798fa enable vulnerability scanning 2024-07-12 16:19:19 -05:00
alexlebens
98cde42b31 enable some scanners 2024-07-12 16:18:05 -05:00
alexlebens
f6eb1e9db4 enable some scanners 2024-07-12 16:13:08 -05:00
alexlebens
7d00efb1ee enable some scanners 2024-07-12 16:07:52 -05:00
alexlebens
df4ade1472 add cloudflared namespaces 2024-07-12 16:07:04 -05:00
alexlebens
c99ce7c509 add trivy 2024-07-12 15:53:15 -05:00
alexlebens
64b43c0c44 remove trivy 2024-07-12 15:29:33 -05:00
alexlebens
5b7cf34411 limit jobs 2024-07-12 15:25:05 -05:00
alexlebens
fc5cded3ef remove systemd from trivy mounts 2024-07-12 15:20:07 -05:00
alexlebens
3b883a64bd add trivy 2024-07-12 14:47:02 -05:00
alexlebens
dbd7d6706e remove spegel and tricy 2024-07-10 19:31:07 -05:00
alexlebens
89b94556df increase timeout 2024-07-10 18:46:43 -05:00
alexlebens
88c636149e fix values 2024-07-10 17:54:54 -05:00
alexlebens
1bcc887544 add trivy 2024-07-10 17:46:29 -05:00