Search results

feat(misconf): bump recommended minimum TLS version to 1.3 for AVD-AZU-0011

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9879 In aquasecurity/trivy;

· nikpivkin opened on Dec 4, 2025

·  

v0.69.0

feat(misconf): add support for Terraform Az Database flexible server resources

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9845 In aquasecurity/trivy;

· nikpivkin opened on Nov 25, 2025

misconf: Revise KSV-0022 to allow valid capabilities

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9844 In aquasecurity/trivy;

· nikpivkin opened on Nov 25, 2025

enhancement(cyclonedx): use <code>component.evidence.occurrences.location</code> for filapaths and linenumber

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

Status: Open.

#9832 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 20, 2025

fix(checks): Improve the detection logic for AVD-KSV-0050

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9826 In aquasecurity/trivy;

· simar7 opened on Nov 20, 2025

feat(misconf): add support for azurerm_linux_web_app and azurerm_windows_web_app

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9820 In aquasecurity/trivy;

· nikpivkin opened on Nov 18, 2025

·  

v0.69.0

bug(cyclonedx): duplicates in dependsOn array when scanned SBOM contains components with same name + version but different bomRef/SPDXID.

Status: Open.

#9815 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 18, 2025

bug: Trivy should overwrite the namespace and distro qualifier for PURLs when the <code>--distro</code> flag is used.

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

Bug

#9796 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 13, 2025

bug(java): pom parser reuses remote repositories across sibling dependencies

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

Bug

#9747 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 4, 2025

·  

v0.69.0

feat(cli): Add login to pro through the browser

Status: Open.

#9746 In aquasecurity/trivy;

· owenrumney opened on Nov 4, 2025

feat(misconf): adapt ARM k8s clusters

good first issueDenotes an issue ready for a new contributor, according to the "help wanted" guidelines.Denotes an issue ready for a new contributor, according to the "help wanted" guidelines.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9696 In aquasecurity/trivy;

· nikpivkin opened on Oct 22, 2025

refactor(cloud): rework the cloud integration to be more CI focused

Status: Open.

#9693 In aquasecurity/trivy;

· owenrumney opened on Oct 21, 2025