|  | 12831ad36e | Update mirror.gcr.io/aquasec/trivy Docker tag to v0.64.1 (#812) 
		
	
	
		
			
				
	
				renovate / renovate (push) Has been cancelled 
				
	
				lint-test-helm / helm-lint (push) Has been cancelled This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.63.0` -> `0.64.1` |
---
### Release Notes
<details>
<summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary>
### [`v0.64.1`](https://github.com/aquasecurity/trivy/releases/tag/v0.64.1)
[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.0...v0.64.1)
#### Changelog
- [`86ee3c1`](86ee3c1176) release: v0.64.1 \[release/v0.64] ([#​9122](https://github.com/aquasecurity/trivy/issues/9122))
- [`4e12722`](4e1272283a) fix(misconf): skip rewriting expr if attr is nil \[backport: release/v0.64] ([#​9127](https://github.com/aquasecurity/trivy/issues/9127))
- [`9a7d384`](9a7d38432c) fix(cli): Add more non-sensitive flags to telemetry \[backport: release/v0.64] ([#​9124](https://github.com/aquasecurity/trivy/issues/9124))
- [`53adfba`](53adfba3c2) fix(rootio): check full version to detect `root.io` packages \[backport: release/v0.64] ([#​9120](https://github.com/aquasecurity/trivy/issues/9120))
- [`8cf1bf9`](8cf1bf9f6f) fix(alma): parse epochs from rpmqa file \[backport: release/v0.64] ([#​9119](https://github.com/aquasecurity/trivy/issues/9119))
### [`v0.64.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0640-2025-06-30)
[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.63.0...v0.64.0)
##### Features
- **cli:** add version constraints to annoucements ([#​9023](https://github.com/aquasecurity/trivy/issues/9023)) ([19efa9f](19efa9fd37))
- **java:** dereference all maven settings.xml env placeholders ([#​9024](https://github.com/aquasecurity/trivy/issues/9024)) ([5aade69](5aade698c7))
- **misconf:** add OpenTofu file extension support ([#​8747](https://github.com/aquasecurity/trivy/issues/8747)) ([57801d0](57801d0324))
- **misconf:** normalize CreatedBy for buildah and legacy docker builder ([#​8953](https://github.com/aquasecurity/trivy/issues/8953)) ([65e155f](65e155fdaf))
- **redhat:** Add EOL date for RHEL 10. ([#​8910](https://github.com/aquasecurity/trivy/issues/8910)) ([48258a7](48258a701a))
- reject unsupported artifact types in remote image retrieval ([#​9052](https://github.com/aquasecurity/trivy/issues/9052)) ([1e1e1b5](1e1e1b5fa6))
- **sbom:** add manufacturer field to CycloneDX tools metadata ([#​9019](https://github.com/aquasecurity/trivy/issues/9019)) ([41d0f94](41d0f949c8))
- **terraform:** add partial evaluation for policy templates ([#​8967](https://github.com/aquasecurity/trivy/issues/8967)) ([a9f7dcd](a9f7dcdb9c))
- **ubuntu:** add end of life date for Ubuntu 25.04 ([#​9077](https://github.com/aquasecurity/trivy/issues/9077)) ([367564a](367564a3be))
- **ubuntu:** add eol date for 20.04-ESM ([#​8981](https://github.com/aquasecurity/trivy/issues/8981)) ([87118a0](87118a0ec4))
- **vuln:** add Root.io support for container image scanning ([#​9073](https://github.com/aquasecurity/trivy/issues/9073)) ([3a0ec0f](3a0ec0f2ac))
##### Bug Fixes
- Add missing version check flags ([#​8951](https://github.com/aquasecurity/trivy/issues/8951)) ([ef5f8de](ef5f8de8da))
- **cli:** add some values to the telemetry call ([#​9056](https://github.com/aquasecurity/trivy/issues/9056)) ([fd2bc91](fd2bc91e13))
- Correctly check for semver versions for trivy version check ([#​8948](https://github.com/aquasecurity/trivy/issues/8948)) ([b813527](b813527449))
- don't show corrupted trivy-db warning for first run ([#​8991](https://github.com/aquasecurity/trivy/issues/8991)) ([4ed78e3](4ed78e39af))
- **misconf:** .Config.User always takes precedence over USER in .History ([#​9050](https://github.com/aquasecurity/trivy/issues/9050)) ([371b8cc](371b8cc02f))
- **misconf:** correct Azure value-to-time conversion in AsTimeValue ([#​9015](https://github.com/aquasecurity/trivy/issues/9015)) ([40d017b](40d017b67d))
- **misconf:** move disabled checks filtering after analyzer scan ([#​9002](https://github.com/aquasecurity/trivy/issues/9002)) ([a58c36d](a58c36de12))
- **misconf:** reduce log noise on incompatible check ([#​9029](https://github.com/aquasecurity/trivy/issues/9029)) ([99c5151](99c5151d6e))
- **nodejs:** correctly parse `packages` array of `bun.lock` file ([#​8998](https://github.com/aquasecurity/trivy/issues/8998)) ([875ec3a](875ec3a9d2))
- **report:** don't panic when report contains vulns, but doesn't contain packages for `table` format ([#​8549](https://github.com/aquasecurity/trivy/issues/8549)) ([87fda76](87fda76f38))
- **sbom:** remove unnecessary OS detection check in SBOM decoding ([#​9034](https://github.com/aquasecurity/trivy/issues/9034)) ([198789a](198789a07b))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
Reviewed-on: #812
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> | 2025-07-05 04:54:50 +00:00 |  | 
			
				
					|  | 2a4adef031 | disable vul scanner 
		
	
	
		
			
				
	
				lint-test-helm / helm-lint (push) Failing after 44s 
				
	
				renovate / renovate (push) Successful in 1m52s | 2025-06-20 12:03:34 -05:00 |  | 
			
				
					|  | 341cbf80da | remove mount 
		
	
	
		
			
				
	
				lint-test-helm / helm-lint (push) Failing after 6s 
				
	
				renovate / renovate (push) Successful in 1m55s | 2025-06-20 11:23:29 -05:00 |  | 
			
				
					|  | c53a97aaea | remove mount 
		
	
	
		
			
				
	
				lint-test-helm / helm-lint (push) Failing after 7s 
				
	
				renovate / renovate (push) Successful in 1m21s | 2025-06-20 11:13:57 -05:00 |  | 
			
				
					|  | 3b1f0099fe | change namespace 
		
	
	
		
			
				
	
				lint-test-helm / helm-lint (push) Failing after 5s 
				
	
				renovate / renovate (push) Successful in 1m22s | 2025-06-20 11:02:06 -05:00 |  | 
			
				
					|  | 982dccb364   | Update Helm release trivy-operator to v0.29.1 
		
	
	
		
			
				
	
				renovate / renovate (push) Has been cancelled 
				
	
				lint-test-helm / helm-lint (push) Failing after 5s 
				
	
				renovate/stability-days Updates have not met minimum release age requirement 
				
	
				lint-test-helm / helm-lint (pull_request) Successful in 9s | 2025-06-19 03:20:48 +00:00 |  | 
			
				
					|  | 36b90765a7   | Update Helm release trivy-operator to v0.29.0 
		
	
	
		
			
				
	
				renovate/stability-days Updates have not met minimum release age requirement 
				
	
				lint-test-helm / helm-lint (pull_request) Successful in 7s | 2025-06-11 14:02:43 +00:00 |  | 
			
				
					|  | 6687200c71 | enable other scanners 
		
	
	
		
			
				
	
				renovate / renovate (push) Successful in 1m28s | 2025-06-05 12:16:47 -05:00 |  | 
			
				
					|  | bba062401d   | Update mirror.gcr.io/aquasec/trivy Docker tag to v0.63.0 
		
	
	
		
			
				
	
				lint-and-test-charts / lint-test (pull_request) Successful in 40s | 2025-06-05 04:37:18 +00:00 |  | 
			
				
					|  | 170811acf6 | fix path 
		
	
	
		
			
				
	
				renovate / renovate (push) Has been cancelled | 2025-06-04 21:38:40 -05:00 |  | 
			
				
					|  | 58f4a8a29b | add trivy 
		
	
	
		
			
				
	
				renovate / renovate (push) Has been cancelled | 2025-06-04 21:38:03 -05:00 |  | 
			
				
					|  | 992704e455 | remove trivy | 2024-08-12 13:14:45 -05:00 |  | 
			
				
					|  | 022107933e | add trivy | 2024-08-11 16:21:19 -05:00 |  | 
			
				
					|  | e7f21018df | remove trivy | 2024-08-08 11:57:37 -05:00 |  | 
			
				
					| 
							
							
								![renovate[bot]](/avatar/8555d8629c2fc48c5a5a2280a4715590?size=56) renovate[bot] | b77dd00344 | Update ghcr.io/aquasecurity/trivy Docker tag to v0.54.1 | 2024-08-01 03:38:42 +00:00 |  | 
			
				
					|  | e0d75229dd | add toleration for control plane | 2024-07-12 16:38:10 -05:00 |  | 
			
				
					|  | 11c8d1ec62 | remove namespace limits | 2024-07-12 16:28:40 -05:00 |  | 
			
				
					|  | a7dc98879e | fix whitespace | 2024-07-12 16:22:35 -05:00 |  | 
			
				
					|  | a9c48798fa | enable vulnerability scanning | 2024-07-12 16:19:19 -05:00 |  | 
			
				
					|  | 98cde42b31 | enable some scanners | 2024-07-12 16:18:05 -05:00 |  | 
			
				
					|  | f6eb1e9db4 | enable some scanners | 2024-07-12 16:13:08 -05:00 |  | 
			
				
					|  | 7d00efb1ee | enable some scanners | 2024-07-12 16:07:52 -05:00 |  | 
			
				
					|  | df4ade1472 | add cloudflared namespaces | 2024-07-12 16:07:04 -05:00 |  | 
			
				
					|  | c99ce7c509 | add trivy | 2024-07-12 15:53:15 -05:00 |  | 
			
				
					|  | 64b43c0c44 | remove trivy | 2024-07-12 15:29:33 -05:00 |  | 
			
				
					|  | 5b7cf34411 | limit jobs | 2024-07-12 15:25:05 -05:00 |  | 
			
				
					|  | fc5cded3ef | remove systemd from trivy mounts | 2024-07-12 15:20:07 -05:00 |  | 
			
				
					|  | 3b883a64bd | add trivy | 2024-07-12 14:47:02 -05:00 |  | 
			
				
					|  | dbd7d6706e | remove spegel and tricy | 2024-07-10 19:31:07 -05:00 |  | 
			
				
					|  | 89b94556df | increase timeout | 2024-07-10 18:46:43 -05:00 |  | 
			
				
					|  | 88c636149e | fix values | 2024-07-10 17:54:54 -05:00 |  | 
			
				
					|  | 1bcc887544 | add trivy | 2024-07-10 17:46:29 -05:00 |  |