38 Commits

Author	SHA1	Message	Date
Alex Lebens	9a611ba15d	disable scanner	2025-08-23 22:27:19 -05:00
Renovate Bot	4b9be37a8c	Update Helm release trivy-operator to v0.30.0 (#1153) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [trivy-operator](https://github.com/aquasecurity/helm-charts) | minor | `0.29.3` -> `0.30.0` | --- ### Release Notes <details> <summary>aquasecurity/helm-charts (trivy-operator)</summary> ### [`v0.30.0`](https://github.com/aquasecurity/helm-charts/releases/tag/trivy-operator-0.30.0) [Compare Source](https://github.com/aquasecurity/helm-charts/compare/trivy-operator-0.29.3...trivy-operator-0.30.0) Keeps security report resources updated </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #1153 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-07 21:15:11 +00:00
Renovate Bot	c7f1cde10a	Update mirror.gcr.io/aquasec/trivy Docker tag to v0.65.0 (#1073) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.64.1` -> `0.65.0` | --- ### Release Notes <details> <summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary> ### [`v0.65.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0650-2025-07-30) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.1...v0.65.0) ##### Features - add graceful shutdown with signal handling ([#&#8203;9242](https://github.com/aquasecurity/trivy/issues/9242)) ([2c05882](2c05882f45)) - add HTTP request/response tracing support ([#&#8203;9125](https://github.com/aquasecurity/trivy/issues/9125)) ([aa5b32a](aa5b32a19f)) - **alma:** add AlmaLinux 10 support ([#&#8203;9207](https://github.com/aquasecurity/trivy/issues/9207)) ([861d51e](861d51e99a)) - **flag:** add schema validation for `--server` flag ([#&#8203;9270](https://github.com/aquasecurity/trivy/issues/9270)) ([ed4640e](ed4640ec27)) - **image:** add Docker context resolution ([#&#8203;9166](https://github.com/aquasecurity/trivy/issues/9166)) ([99cd4e7](99cd4e776c)) - **license:** observe pkg types option in license scanner ([#&#8203;9091](https://github.com/aquasecurity/trivy/issues/9091)) ([d44af8c](d44af8cfa2)) - **misconf:** add private ip google access attribute to subnetwork ([#&#8203;9199](https://github.com/aquasecurity/trivy/issues/9199)) ([263845c](263845cfc1)) - **misconf:** added logging and versioning to the gcp storage bucket ([#&#8203;9226](https://github.com/aquasecurity/trivy/issues/9226)) ([110f80e](110f80ea29)) - **repo:** add git repository metadata to reports ([#&#8203;9252](https://github.com/aquasecurity/trivy/issues/9252)) ([f4b2cf1](f4b2cf10e9)) - **report:** add CVSS vectors in sarif report ([#&#8203;9157](https://github.com/aquasecurity/trivy/issues/9157)) ([60723e6](60723e6cfc)) - **sbom:** add SHA-512 hash support for CycloneDX SBOM ([#&#8203;9126](https://github.com/aquasecurity/trivy/issues/9126)) ([12d6706](12d6706961)) ##### Bug Fixes - **alma:** parse epochs from rpmqa file ([#&#8203;9101](https://github.com/aquasecurity/trivy/issues/9101)) ([82db2fc](82db2fcc80)) - also check `filepath` when removing duplicate packages ([#&#8203;9142](https://github.com/aquasecurity/trivy/issues/9142)) ([4d10a81](4d10a815dd)) - **aws:** update amazon linux 2 EOL date ([#&#8203;9176](https://github.com/aquasecurity/trivy/issues/9176)) ([0ecfed6](0ecfed6ea7)) - **cli:** Add more non-sensitive flags to telemetry ([#&#8203;9110](https://github.com/aquasecurity/trivy/issues/9110)) ([7041a39](7041a39bdc)) - **cli:** ensure correct command is picked by telemetry ([#&#8203;9260](https://github.com/aquasecurity/trivy/issues/9260)) ([b4ad00f](b4ad00f301)) - **cli:** panic: attempt to get os.Args\[1] when len(os.Args) < 2 ([#&#8203;9206](https://github.com/aquasecurity/trivy/issues/9206)) ([adfa879](adfa879e4e)) - **license:** add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping ([#&#8203;9116](https://github.com/aquasecurity/trivy/issues/9116)) ([a692f29](a692f296d1)) - **license:** handle WITH operator for `LaxSplitLicenses` ([#&#8203;9232](https://github.com/aquasecurity/trivy/issues/9232)) ([b4193d0](b4193d0d31)) - migrate from `*.list` to `*.md5sums` files for `dpkg` ([#&#8203;9131](https://github.com/aquasecurity/trivy/issues/9131)) ([f224de3](f224de3e39)) - **misconf:** correctly adapt azure storage account ([#&#8203;9138](https://github.com/aquasecurity/trivy/issues/9138)) ([51aa022](51aa022260)) - **misconf:** correctly parse empty port ranges in google\_compute\_firewall ([#&#8203;9237](https://github.com/aquasecurity/trivy/issues/9237)) ([77bab7b](77bab7b6d2)) - **misconf:** fix log bucket in schema ([#&#8203;9235](https://github.com/aquasecurity/trivy/issues/9235)) ([7ebc129](7ebc129ab7)) - **misconf:** skip rewriting expr if attr is nil ([#&#8203;9113](https://github.com/aquasecurity/trivy/issues/9113)) ([42ccd3d](42ccd3df9a)) - **nodejs:** don't use prerelease logic for compare npm constraints ([#&#8203;9208](https://github.com/aquasecurity/trivy/issues/9208)) ([fe96436](fe96436b99)) - prevent graceful shutdown message on normal exit ([#&#8203;9244](https://github.com/aquasecurity/trivy/issues/9244)) ([6095984](6095984d53)) - **rootio:** check full version to detect `root.io` packages ([#&#8203;9117](https://github.com/aquasecurity/trivy/issues/9117)) ([c2ddd44](c2ddd44d98)) - **rootio:** fix severity selection ([#&#8203;9181](https://github.com/aquasecurity/trivy/issues/9181)) ([6fafbeb](6fafbeb606)) - **sbom:** merge in-graph and out-of-graph OS packages in scan results ([#&#8203;9194](https://github.com/aquasecurity/trivy/issues/9194)) ([aa944cc](aa944cc6da)) - **sbom:** use correct field for licenses in CycloneDX reports ([#&#8203;9057](https://github.com/aquasecurity/trivy/issues/9057)) ([143da88](143da88dd8)) - **secret:** add UTF-8 validation in secret scanner to prevent protobuf marshalling errors ([#&#8203;9253](https://github.com/aquasecurity/trivy/issues/9253)) ([54832a7](54832a77b5)) - **secret:** fix line numbers for multiple-line secrets ([#&#8203;9104](https://github.com/aquasecurity/trivy/issues/9104)) ([e579746](e57974649e)) - **server:** add HTTP transport setup to server mode ([#&#8203;9217](https://github.com/aquasecurity/trivy/issues/9217)) ([1163b04](1163b044c7)) - supporting .egg-info/METADATA in python.Packaging analyzer ([#&#8203;9151](https://github.com/aquasecurity/trivy/issues/9151)) ([e306e2d](e306e2dc52)) - **terraform:** `for_each` on a map returns a resource for every key ([#&#8203;9156](https://github.com/aquasecurity/trivy/issues/9156)) ([153318f](153318f65f)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19--> Reviewed-on: #1073 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-31 15:10:56 +00:00
Renovate Bot	a55c150931	Update Helm release trivy-operator to v0.29.3	2025-07-11 23:01:12 +00:00
Renovate Bot	071ddd31a3	Update Helm release trivy-operator to v0.29.2	2025-07-09 08:01:33 +00:00
Alex Lebens	f67e39ebaa	add toleration	2025-07-08 21:27:25 -05:00
Renovate Bot	12831ad36e	Update mirror.gcr.io/aquasec/trivy Docker tag to v0.64.1 (#812) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.63.0` -> `0.64.1` | --- ### Release Notes <details> <summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary> ### [`v0.64.1`](https://github.com/aquasecurity/trivy/releases/tag/v0.64.1) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.0...v0.64.1) #### Changelog - [`86ee3c1`](86ee3c1176) release: v0.64.1 \[release/v0.64] ([#&#8203;9122](https://github.com/aquasecurity/trivy/issues/9122)) - [`4e12722`](4e1272283a) fix(misconf): skip rewriting expr if attr is nil \[backport: release/v0.64] ([#&#8203;9127](https://github.com/aquasecurity/trivy/issues/9127)) - [`9a7d384`](9a7d38432c) fix(cli): Add more non-sensitive flags to telemetry \[backport: release/v0.64] ([#&#8203;9124](https://github.com/aquasecurity/trivy/issues/9124)) - [`53adfba`](53adfba3c2) fix(rootio): check full version to detect `root.io` packages \[backport: release/v0.64] ([#&#8203;9120](https://github.com/aquasecurity/trivy/issues/9120)) - [`8cf1bf9`](8cf1bf9f6f) fix(alma): parse epochs from rpmqa file \[backport: release/v0.64] ([#&#8203;9119](https://github.com/aquasecurity/trivy/issues/9119)) ### [`v0.64.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0640-2025-06-30) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.63.0...v0.64.0) ##### Features - **cli:** add version constraints to annoucements ([#&#8203;9023](https://github.com/aquasecurity/trivy/issues/9023)) ([19efa9f](19efa9fd37)) - **java:** dereference all maven settings.xml env placeholders ([#&#8203;9024](https://github.com/aquasecurity/trivy/issues/9024)) ([5aade69](5aade698c7)) - **misconf:** add OpenTofu file extension support ([#&#8203;8747](https://github.com/aquasecurity/trivy/issues/8747)) ([57801d0](57801d0324)) - **misconf:** normalize CreatedBy for buildah and legacy docker builder ([#&#8203;8953](https://github.com/aquasecurity/trivy/issues/8953)) ([65e155f](65e155fdaf)) - **redhat:** Add EOL date for RHEL 10. ([#&#8203;8910](https://github.com/aquasecurity/trivy/issues/8910)) ([48258a7](48258a701a)) - reject unsupported artifact types in remote image retrieval ([#&#8203;9052](https://github.com/aquasecurity/trivy/issues/9052)) ([1e1e1b5](1e1e1b5fa6)) - **sbom:** add manufacturer field to CycloneDX tools metadata ([#&#8203;9019](https://github.com/aquasecurity/trivy/issues/9019)) ([41d0f94](41d0f949c8)) - **terraform:** add partial evaluation for policy templates ([#&#8203;8967](https://github.com/aquasecurity/trivy/issues/8967)) ([a9f7dcd](a9f7dcdb9c)) - **ubuntu:** add end of life date for Ubuntu 25.04 ([#&#8203;9077](https://github.com/aquasecurity/trivy/issues/9077)) ([367564a](367564a3be)) - **ubuntu:** add eol date for 20.04-ESM ([#&#8203;8981](https://github.com/aquasecurity/trivy/issues/8981)) ([87118a0](87118a0ec4)) - **vuln:** add Root.io support for container image scanning ([#&#8203;9073](https://github.com/aquasecurity/trivy/issues/9073)) ([3a0ec0f](3a0ec0f2ac)) ##### Bug Fixes - Add missing version check flags ([#&#8203;8951](https://github.com/aquasecurity/trivy/issues/8951)) ([ef5f8de](ef5f8de8da)) - **cli:** add some values to the telemetry call ([#&#8203;9056](https://github.com/aquasecurity/trivy/issues/9056)) ([fd2bc91](fd2bc91e13)) - Correctly check for semver versions for trivy version check ([#&#8203;8948](https://github.com/aquasecurity/trivy/issues/8948)) ([b813527](b813527449)) - don't show corrupted trivy-db warning for first run ([#&#8203;8991](https://github.com/aquasecurity/trivy/issues/8991)) ([4ed78e3](4ed78e39af)) - **misconf:** .Config.User always takes precedence over USER in .History ([#&#8203;9050](https://github.com/aquasecurity/trivy/issues/9050)) ([371b8cc](371b8cc02f)) - **misconf:** correct Azure value-to-time conversion in AsTimeValue ([#&#8203;9015](https://github.com/aquasecurity/trivy/issues/9015)) ([40d017b](40d017b67d)) - **misconf:** move disabled checks filtering after analyzer scan ([#&#8203;9002](https://github.com/aquasecurity/trivy/issues/9002)) ([a58c36d](a58c36de12)) - **misconf:** reduce log noise on incompatible check ([#&#8203;9029](https://github.com/aquasecurity/trivy/issues/9029)) ([99c5151](99c5151d6e)) - **nodejs:** correctly parse `packages` array of `bun.lock` file ([#&#8203;8998](https://github.com/aquasecurity/trivy/issues/8998)) ([875ec3a](875ec3a9d2)) - **report:** don't panic when report contains vulns, but doesn't contain packages for `table` format ([#&#8203;8549](https://github.com/aquasecurity/trivy/issues/8549)) ([87fda76](87fda76f38)) - **sbom:** remove unnecessary OS detection check in SBOM decoding ([#&#8203;9034](https://github.com/aquasecurity/trivy/issues/9034)) ([198789a](198789a07b)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19--> Reviewed-on: #812 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-07-05 04:54:50 +00:00
Alex Lebens	2a4adef031	disable vul scanner	2025-06-20 12:03:34 -05:00
Alex Lebens	341cbf80da	remove mount	2025-06-20 11:23:29 -05:00
Alex Lebens	c53a97aaea	remove mount	2025-06-20 11:13:57 -05:00
Alex Lebens	3b1f0099fe	change namespace	2025-06-20 11:02:06 -05:00
Renovate Bot	982dccb364	Update Helm release trivy-operator to v0.29.1	2025-06-19 03:20:48 +00:00
Renovate Bot	36b90765a7	Update Helm release trivy-operator to v0.29.0	2025-06-11 14:02:43 +00:00
Alex Lebens	6687200c71	enable other scanners	2025-06-05 12:16:47 -05:00
Renovate Bot	bba062401d	Update mirror.gcr.io/aquasec/trivy Docker tag to v0.63.0	2025-06-05 04:37:18 +00:00
Alex Lebens	170811acf6	fix path	2025-06-04 21:38:40 -05:00
Alex Lebens	58f4a8a29b	add trivy	2025-06-04 21:38:03 -05:00
alexlebens	992704e455	remove trivy	2024-08-12 13:14:45 -05:00
alexlebens	022107933e	add trivy	2024-08-11 16:21:19 -05:00
alexlebens	e7f21018df	remove trivy	2024-08-08 11:57:37 -05:00
renovate[bot]	b77dd00344	Update ghcr.io/aquasecurity/trivy Docker tag to v0.54.1	2024-08-01 03:38:42 +00:00
alexlebens	e0d75229dd	add toleration for control plane	2024-07-12 16:38:10 -05:00
alexlebens	11c8d1ec62	remove namespace limits	2024-07-12 16:28:40 -05:00
alexlebens	a7dc98879e	fix whitespace	2024-07-12 16:22:35 -05:00
alexlebens	a9c48798fa	enable vulnerability scanning	2024-07-12 16:19:19 -05:00
alexlebens	98cde42b31	enable some scanners	2024-07-12 16:18:05 -05:00
alexlebens	f6eb1e9db4	enable some scanners	2024-07-12 16:13:08 -05:00
alexlebens	7d00efb1ee	enable some scanners	2024-07-12 16:07:52 -05:00
alexlebens	df4ade1472	add cloudflared namespaces	2024-07-12 16:07:04 -05:00
alexlebens	c99ce7c509	add trivy	2024-07-12 15:53:15 -05:00
alexlebens	64b43c0c44	remove trivy	2024-07-12 15:29:33 -05:00
alexlebens	5b7cf34411	limit jobs	2024-07-12 15:25:05 -05:00
alexlebens	fc5cded3ef	remove systemd from trivy mounts	2024-07-12 15:20:07 -05:00
alexlebens	3b883a64bd	add trivy	2024-07-12 14:47:02 -05:00
alexlebens	dbd7d6706e	remove spegel and tricy	2024-07-10 19:31:07 -05:00
alexlebens	89b94556df	increase timeout	2024-07-10 18:46:43 -05:00
alexlebens	88c636149e	fix values	2024-07-10 17:54:54 -05:00
alexlebens	1bcc887544	add trivy	2024-07-10 17:46:29 -05:00