Search results

bug: SeveritySource is empty when severity falls back to top-level Severity field from trivy-db

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/vulnerabilityIssues relating to vulnerability scanningIssues relating to vulnerability scanning

Status: Open.

Bug

#10409 In aquasecurity/trivy;

· DmitriyLewen opened on Mar 19, 2026

feat(misconf): Add Dockerfile check for RUN with pipe missing pipefail

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#10401 In aquasecurity/trivy;

· nikpivkin opened on Mar 18, 2026

bug(misconf): panic in Terraform Plan JSON parser when resource changes are missing

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#10399 In aquasecurity/trivy;

· nikpivkin opened on Mar 18, 2026

bug(module): memory leak caused by incorrect free function call

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

#10392 In aquasecurity/trivy;

· nikpivkin opened on Mar 16, 2026

feat(uv): support workspace projects

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

Status: Open.

Feature

#10385 In aquasecurity/trivy;

· knqyf263 opened on Mar 13, 2026

bug(misconf): ignore by AVDID became case-sensitive

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Bug

#10374 In aquasecurity/trivy;

· nikpivkin opened on Mar 12, 2026

chore: mark GCP-0048 as deprecated

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#10371 In aquasecurity/trivy;

· nikpivkin opened on Mar 11, 2026

feat(sbom): Add support for CycloneDX 1.7 specification

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/sbomIssues relating to SBOMIssues relating to SBOM

Status: Open.

Feature

#10185 In aquasecurity/trivy;

· DmitriyLewen opened on Feb 11, 2026

bug(k8s): RKE2 commands contain audits referencing incorrect paths

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

target/kubernetesIssues relating to kubernetes cluster scanningIssues relating to kubernetes cluster scanning

Status: Open.

#10167 In aquasecurity/trivy;

· nikpivkin opened on Feb 7, 2026

bug(ansible): invalid playbook YAML causes panic

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#10131 In aquasecurity/trivy;

· nikpivkin opened on Feb 3, 2026

Include local DB version information in JSON output

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

Status: Open.

Feature

#10076 In aquasecurity/trivy;

· knqyf263 opened on Jan 21, 2026

·  

v0.70.0

bug(terraform): FP when data block contains for_each

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Bug

#10047 In aquasecurity/trivy;

· nikpivkin opened on Jan 13, 2026