525 Commits

Author	SHA1	Message	Date
renovate-bot	c7f1cde10a	Update mirror.gcr.io/aquasec/trivy Docker tag to v0.65.0 (#1073) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.64.1` -> `0.65.0` | --- ### Release Notes <details> <summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary> ### [`v0.65.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0650-2025-07-30) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.1...v0.65.0) ##### Features - add graceful shutdown with signal handling ([#&#8203;9242](https://github.com/aquasecurity/trivy/issues/9242)) ([2c05882](https://github.com/aquasecurity/trivy/commit/2c05882f45071928c14d8212ef6c4f0f7048245d)) - add HTTP request/response tracing support ([#&#8203;9125](https://github.com/aquasecurity/trivy/issues/9125)) ([aa5b32a](https://github.com/aquasecurity/trivy/commit/aa5b32a19f4d61d0df72c11fd314c5a0b7284202)) - **alma:** add AlmaLinux 10 support ([#&#8203;9207](https://github.com/aquasecurity/trivy/issues/9207)) ([861d51e](https://github.com/aquasecurity/trivy/commit/861d51e99a45ee448f86fe195dedcaefb811c919)) - **flag:** add schema validation for `--server` flag ([#&#8203;9270](https://github.com/aquasecurity/trivy/issues/9270)) ([ed4640e](https://github.com/aquasecurity/trivy/commit/ed4640ec27f2575a50d7e6d516c9e2e45a59bb7f)) - **image:** add Docker context resolution ([#&#8203;9166](https://github.com/aquasecurity/trivy/issues/9166)) ([99cd4e7](https://github.com/aquasecurity/trivy/commit/99cd4e776c0c6cc689126e53fa86ee6333ba6277)) - **license:** observe pkg types option in license scanner ([#&#8203;9091](https://github.com/aquasecurity/trivy/issues/9091)) ([d44af8c](https://github.com/aquasecurity/trivy/commit/d44af8cfa21a145d14ca6e5e1ed4742d892f2dc5)) - **misconf:** add private ip google access attribute to subnetwork ([#&#8203;9199](https://github.com/aquasecurity/trivy/issues/9199)) ([263845c](https://github.com/aquasecurity/trivy/commit/263845cfc1419401f24adc8bc6316f3ea0caacad)) - **misconf:** added logging and versioning to the gcp storage bucket ([#&#8203;9226](https://github.com/aquasecurity/trivy/issues/9226)) ([110f80e](https://github.com/aquasecurity/trivy/commit/110f80ea29951863997dd5a1c48fe14eb81e230b)) - **repo:** add git repository metadata to reports ([#&#8203;9252](https://github.com/aquasecurity/trivy/issues/9252)) ([f4b2cf1](https://github.com/aquasecurity/trivy/commit/f4b2cf10e917d58c0840f789e083bd3f268a8af1)) - **report:** add CVSS vectors in sarif report ([#&#8203;9157](https://github.com/aquasecurity/trivy/issues/9157)) ([60723e6](https://github.com/aquasecurity/trivy/commit/60723e6cfce82ede2863cf545a189c581246f4e9)) - **sbom:** add SHA-512 hash support for CycloneDX SBOM ([#&#8203;9126](https://github.com/aquasecurity/trivy/issues/9126)) ([12d6706](https://github.com/aquasecurity/trivy/commit/12d6706961423acb12430c8b3d986b4aa4671d04)) ##### Bug Fixes - **alma:** parse epochs from rpmqa file ([#&#8203;9101](https://github.com/aquasecurity/trivy/issues/9101)) ([82db2fc](https://github.com/aquasecurity/trivy/commit/82db2fcc8034c911cc7a67f5a82d2f081d9c1fdf)) - also check `filepath` when removing duplicate packages ([#&#8203;9142](https://github.com/aquasecurity/trivy/issues/9142)) ([4d10a81](https://github.com/aquasecurity/trivy/commit/4d10a815dde53f5e128366f1dd0837a1dc29c17b)) - **aws:** update amazon linux 2 EOL date ([#&#8203;9176](https://github.com/aquasecurity/trivy/issues/9176)) ([0ecfed6](https://github.com/aquasecurity/trivy/commit/0ecfed6ea75cfe33e0f436a9015ac72a679e754e)) - **cli:** Add more non-sensitive flags to telemetry ([#&#8203;9110](https://github.com/aquasecurity/trivy/issues/9110)) ([7041a39](https://github.com/aquasecurity/trivy/commit/7041a39bdcf21c5b3114137d9a931f529eac2566)) - **cli:** ensure correct command is picked by telemetry ([#&#8203;9260](https://github.com/aquasecurity/trivy/issues/9260)) ([b4ad00f](https://github.com/aquasecurity/trivy/commit/b4ad00f301a5fd7326060a567871c6f4a9711696)) - **cli:** panic: attempt to get os.Args\[1] when len(os.Args) < 2 ([#&#8203;9206](https://github.com/aquasecurity/trivy/issues/9206)) ([adfa879](https://github.com/aquasecurity/trivy/commit/adfa879e4e8ab88f211222a13d2b89013ae9a853)) - **license:** add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping ([#&#8203;9116](https://github.com/aquasecurity/trivy/issues/9116)) ([a692f29](https://github.com/aquasecurity/trivy/commit/a692f296d15f7241ba5ff082e4e69926b1c728a8)) - **license:** handle WITH operator for `LaxSplitLicenses` ([#&#8203;9232](https://github.com/aquasecurity/trivy/issues/9232)) ([b4193d0](https://github.com/aquasecurity/trivy/commit/b4193d0d31a167aafdcd9d9ccd89f3f124eef7ee)) - migrate from `*.list` to `*.md5sums` files for `dpkg` ([#&#8203;9131](https://github.com/aquasecurity/trivy/issues/9131)) ([f224de3](https://github.com/aquasecurity/trivy/commit/f224de3e39b08672212ec0f94660c36bef77bc30)) - **misconf:** correctly adapt azure storage account ([#&#8203;9138](https://github.com/aquasecurity/trivy/issues/9138)) ([51aa022](https://github.com/aquasecurity/trivy/commit/51aa0222604829706193eb2ff3a6886742bb42b4)) - **misconf:** correctly parse empty port ranges in google\_compute\_firewall ([#&#8203;9237](https://github.com/aquasecurity/trivy/issues/9237)) ([77bab7b](https://github.com/aquasecurity/trivy/commit/77bab7b6d25c712e2db7dc53956985c2721728e9)) - **misconf:** fix log bucket in schema ([#&#8203;9235](https://github.com/aquasecurity/trivy/issues/9235)) ([7ebc129](https://github.com/aquasecurity/trivy/commit/7ebc129ab726f3133d940708837b7edda2621105)) - **misconf:** skip rewriting expr if attr is nil ([#&#8203;9113](https://github.com/aquasecurity/trivy/issues/9113)) ([42ccd3d](https://github.com/aquasecurity/trivy/commit/42ccd3df9a7c838a99facb8248e1a68eaf47a999)) - **nodejs:** don't use prerelease logic for compare npm constraints ([#&#8203;9208](https://github.com/aquasecurity/trivy/issues/9208)) ([fe96436](https://github.com/aquasecurity/trivy/commit/fe96436b99bae3bbfc7498d2ad222d4acccdfcf1)) - prevent graceful shutdown message on normal exit ([#&#8203;9244](https://github.com/aquasecurity/trivy/issues/9244)) ([6095984](https://github.com/aquasecurity/trivy/commit/6095984d5340633740204a7a40f002a5643802b9)) - **rootio:** check full version to detect `root.io` packages ([#&#8203;9117](https://github.com/aquasecurity/trivy/issues/9117)) ([c2ddd44](https://github.com/aquasecurity/trivy/commit/c2ddd44d98594a2066cb5b5acbb9ad2aaad8fd96)) - **rootio:** fix severity selection ([#&#8203;9181](https://github.com/aquasecurity/trivy/issues/9181)) ([6fafbeb](https://github.com/aquasecurity/trivy/commit/6fafbeb60609a020b47266743250ea847234cbbd)) - **sbom:** merge in-graph and out-of-graph OS packages in scan results ([#&#8203;9194](https://github.com/aquasecurity/trivy/issues/9194)) ([aa944cc](https://github.com/aquasecurity/trivy/commit/aa944cc6da43e2035f74e9d842f487c0d2f993f4)) - **sbom:** use correct field for licenses in CycloneDX reports ([#&#8203;9057](https://github.com/aquasecurity/trivy/issues/9057)) ([143da88](https://github.com/aquasecurity/trivy/commit/143da88dd82dfbe204f4c2afe46af3b01701675d)) - **secret:** add UTF-8 validation in secret scanner to prevent protobuf marshalling errors ([#&#8203;9253](https://github.com/aquasecurity/trivy/issues/9253)) ([54832a7](https://github.com/aquasecurity/trivy/commit/54832a77b50e2da3a3ceacbb6ce1b13e45605cde)) - **secret:** fix line numbers for multiple-line secrets ([#&#8203;9104](https://github.com/aquasecurity/trivy/issues/9104)) ([e579746](https://github.com/aquasecurity/trivy/commit/e57974649e4a3a275b9cf02db191b3f6bf10340f)) - **server:** add HTTP transport setup to server mode ([#&#8203;9217](https://github.com/aquasecurity/trivy/issues/9217)) ([1163b04](https://github.com/aquasecurity/trivy/commit/1163b044c7e91a81bba3a862cc4a38e90182f0b4)) - supporting .egg-info/METADATA in python.Packaging analyzer ([#&#8203;9151](https://github.com/aquasecurity/trivy/issues/9151)) ([e306e2d](https://github.com/aquasecurity/trivy/commit/e306e2dc5275c0e75f056c8c7ee9ff9261c78e7f)) - **terraform:** `for_each` on a map returns a resource for every key ([#&#8203;9156](https://github.com/aquasecurity/trivy/issues/9156)) ([153318f](https://github.com/aquasecurity/trivy/commit/153318f65f7e5059bcc064bd2cd651cc720791a9)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1073 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-31 15:10:56 +00:00
renovate-bot	bd9e13db31	Update Helm release loki to v6.34.0 (#1065) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.33.0` -> `6.34.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19--> Reviewed-on: #1065 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-30 20:59:02 +00:00
alexlebens	df49d279f5	switch redis	2025-07-29 19:47:12 -05:00
alexlebens	78dce69935	add rdis	2025-07-29 19:44:32 -05:00
alexlebens	28a695f6e0	switch redis	2025-07-29 19:41:10 -05:00
alexlebens	82e643e7ba	add redis	2025-07-29 19:36:57 -05:00
alexlebens	7437f992e7	add redis dashboards	2025-07-29 18:05:25 -05:00
alexlebens	7f1652abda	fix documentation	2025-07-29 16:26:36 -05:00
renovate-bot	11fae5bd22	Update Helm release app-template to v4.2.0 (#1050) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [app-template](https://github.com/bjw-s-labs/helm-charts) | minor | `4.1.2` -> `4.2.0` | --- ### Release Notes <details> <summary>bjw-s-labs/helm-charts (app-template)</summary> ### [`v4.2.0`](https://github.com/bjw-s-labs/helm-charts/releases/tag/app-template-4.2.0) [Compare Source](https://github.com/bjw-s-labs/helm-charts/compare/app-template-4.1.2...app-template-4.2.0) ##### Changelog: ##### Changed - Upgraded the common library to v4.2.0 - [Upgrade notes](https://bjw-s-labs.github.io/helm-charts/docs/app-template/upgrade-instructions/) - [Detailed release notes](https://github.com/bjw-s-labs/helm-charts/releases/tag/common-4.2.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #1050 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-29 21:06:50 +00:00
renovate-bot	387e93912e	Update kube-prometheus-stack Docker tag to v75.15.1 (#1044)	2025-07-28 17:02:44 +00:00
renovate-bot	3086eb9a20	Update kube-prometheus-stack Docker tag to v75.15.0 (#1023)	2025-07-25 18:01:50 +00:00
renovate-bot	90faa82ade	Update kube-prometheus-stack Docker tag to v75.14.0 (#1019)	2025-07-25 14:01:48 +00:00
renovate-bot	f5001471eb	Update Helm release loki to v6.33.0 (#1014) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.32.0` -> `6.33.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #1014 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-25 00:47:34 +00:00
renovate-bot	410ccb3844	Update kube-prometheus-stack Docker tag to v75.13.0	2025-07-22 18:02:17 +00:00
renovate-bot	943c383853	Update kube-prometheus-stack Docker tag to v75.12.0 (#967)	2025-07-18 15:02:20 +00:00
renovate-bot	e3be305110	Update Helm release loki to v6.32.0 (#951) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.31.0` -> `6.32.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19--> Reviewed-on: #951 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-17 00:48:26 +00:00
renovate-bot	2389ef8c72	Update valkey Docker tag to v3.0.22 (#932)	2025-07-16 03:02:19 +00:00
renovate-bot	3b3de5932f	Update kube-prometheus-stack Docker tag to v75.11.0	2025-07-15 18:01:15 +00:00
renovate-bot	162d3ff031	Update valkey Docker tag to v3.0.21	2025-07-15 17:01:01 +00:00
renovate-bot	a55c150931	Update Helm release trivy-operator to v0.29.3	2025-07-11 23:01:12 +00:00
renovate-bot	0e28c17110	Update kube-prometheus-stack Docker tag to v75.10.0	2025-07-11 18:01:22 +00:00
alexlebens	d2d096ea14	change selector	2025-07-10 15:04:54 -05:00
renovate-bot	b660eb91f8	Update Helm release loki to v6.31.0 (#880) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.30.1` -> `6.31.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19--> Reviewed-on: #880 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-10 03:28:09 +00:00
alexlebens	9264d0822c	change interval	2025-07-09 22:20:12 -05:00
alexlebens	9a4ae74055	change dashboard	2025-07-09 21:53:57 -05:00
alexlebens	13b6150bf8	clean	2025-07-09 21:47:49 -05:00
alexlebens	76998e656e	ceph monitor	2025-07-09 21:45:50 -05:00
alexlebens	0f6debbed2	change interval	2025-07-09 21:31:05 -05:00
alexlebens	72481df33b	change match	2025-07-09 21:17:38 -05:00
alexlebens	368a756f82	change interval	2025-07-09 21:02:16 -05:00
alexlebens	c66982ae0f	change cred	2025-07-09 20:59:13 -05:00
alexlebens	ece2f417ee	change endpoint	2025-07-09 20:54:21 -05:00
alexlebens	8e9943bf16	change cred	2025-07-09 20:52:45 -05:00
alexlebens	0fff683779	change config	2025-07-09 20:49:33 -05:00
alexlebens	df3005b463	change endpoint	2025-07-09 20:43:03 -05:00
alexlebens	af28a82603	use different endpoint	2025-07-09 20:38:01 -05:00
alexlebens	8db946c072	use different image	2025-07-09 20:33:54 -05:00
alexlebens	8ce792750d	change endpoint	2025-07-09 20:06:59 -05:00
alexlebens	58478a4d75	change endpoint	2025-07-09 19:57:31 -05:00
alexlebens	e243a71c97	adjust	2025-07-09 19:54:49 -05:00
alexlebens	37707c4d8a	adjust	2025-07-09 19:51:20 -05:00
alexlebens	399b9582f5	adjust	2025-07-09 19:41:52 -05:00
renovate-bot	071ddd31a3	Update Helm release trivy-operator to v0.29.2	2025-07-09 08:01:33 +00:00
renovate-bot	6009bf8ec6	Update valkey Docker tag to v3.0.20	2025-07-09 07:02:46 +00:00
alexlebens	f67e39ebaa	add toleration	2025-07-08 21:27:25 -05:00
alexlebens	0de4ec60be	change endpoint	2025-07-08 21:10:01 -05:00
alexlebens	6388857514	add debug log	2025-07-08 21:08:49 -05:00
alexlebens	fffd144bee	fix env	2025-07-08 21:00:52 -05:00
alexlebens	c0101ad39a	fix image	2025-07-08 20:59:53 -05:00
alexlebens	9d6601e558	fix field	2025-07-08 20:58:27 -05:00