aquasecurity trivy Bugs Discussions
Pinned Discussions
Bugs Discussions
Something doesn't work as expected
-
You must be logged in to vote Bom module in maven multimodule project is not used correctly without first installing the artifacts
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote IP allow list blocks gh CLI in CI, preventing release integrity attestation
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Different result for VEX between SBOM and image scanning
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy scans a library declared as "test" in a dependency module
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Terraform scan stack overflow in countBlockRecursion (sort.go) - v0.69.3
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy Java DB failing to Publish
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote dockerhub latest tag gone?
kind/bugCategorizes issue or PR as related to a bug. triage/duplicateIndicates an issue is a duplicate of other open issue. -
You must be logged in to vote Trivy v0.69.3 google.golang.org/grpc
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Publish the artifacts for the trivy_0.62.1 version
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Docker Image missing latest tag
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Release versions between v0.26.0 and v0.69.2 just disappeared from Github
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy Ignore Alias only allowed upper case
kind/featureCategorizes issue or PR as related to a new feature. scan/misconfigurationIssues relating to misconfiguration scanning target/cloudIssues relating to cloud account scanning -
You must be logged in to vote fix(eks): EKS-CIS-1.4 incorrect check for control 3.1.1
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy version 0.69.4 is not released but mis-found in Trivy update in Mason
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote aquasec/trivy:latest Docker tag is single-arch (arm64 only) — should be multi-arch manifest list
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Docker image latest only build for arm OS/ARCH Missed it other ARCH
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy get a parsing error when scanning a terraform plan json file for certain resources
kind/bugCategorizes issue or PR as related to a bug. triage/supportIndicates an issue that is a support question. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Trivy 0.69.3 Includes Go net/url CVE-2026-25679
kind/securityCategorizes issue or PR as related to Trivy's own security or internal vulnerabilities. -
You must be logged in to vote Trivy v0.69.2 fails to scan python:3.12.13-slim with invalid tar header
kind/bugCategorizes issue or PR as related to a bug. target/container-imageIssues relating to container image scanning -
You must be logged in to vote Nil Pointer Dereference in Terraform Plan JSON Parser
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote WASM module memory leak: free() called with wrong number of arguments
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote node.js vulnerability detection in images does not work
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Failure to parse package-lock.json file including legacy license array format
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote SPDX 2.3 Compliance: Missing mandatory license fields for APPLICATION and SOURCE packages in v0.69.3
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Incorrect ROOTPATH in sarif output in Git repository
kind/bugCategorizes issue or PR as related to a bug.
