Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
token-joe
/
trivy
Public
forked from
aquasecurity/trivy
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Branch selector
main
User selector
All users
Datepicker
All time
Commit history
Commits on Mar 19, 2026
fix: remove os.Stdout from wazero module config (#10403)
Show description for bda9710
nikpivkin
authored
bda9710
View commit details
Copy full SHA for bda9710
Browse repository at this point
chore(deps): bump the common group across 1 directory with 22 updates (#10408)
Show description for 1a6f7a1
dependabot[bot]
authored
1a6f7a1
View commit details
Copy full SHA for 1a6f7a1
Browse repository at this point
chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#10407)
Show description for 297e7fa
dependabot[bot]
authored
297e7fa
View commit details
Copy full SHA for 297e7fa
Browse repository at this point
Commits on Mar 18, 2026
fix(flag): validate template file extension (#10296)
Show description for 20458b8
DmitriyLewen
and
knqyf263
authored
20458b8
View commit details
Copy full SHA for 20458b8
Browse repository at this point
fix(sbom): preserve Red Hat BuildInfo when scanning SBOMs without layer info (#10378)
DmitriyLewen
authored
e9e9e8c
View commit details
Copy full SHA for e9e9e8c
Browse repository at this point
Commits on Mar 17, 2026
fix: handle Go 1.26 GOEXPERIMENT version format change (#10351)
Show description for f207ec6
VedantMadane
and
DmitriyLewen
authored
f207ec6
View commit details
Copy full SHA for f207ec6
Browse repository at this point
Commits on Mar 16, 2026
fix(python): handle multiple version specifiers in requirements.txt (#10361)
knqyf263
authored
4cf4498
View commit details
Copy full SHA for 4cf4498
Browse repository at this point
Commits on Mar 13, 2026
ci: run Trivy version bump in trivy-action (#10272)
Show description for 51c1599
nikpivkin
authored
51c1599
View commit details
Copy full SHA for 51c1599
Browse repository at this point
fix(python): nil pointer dereference with optional poetry groups without dependencies (#10359)
knqyf263
authored
12ab3ce
View commit details
Copy full SHA for 12ab3ce
Browse repository at this point
ci: replace personal email with github-actions[bot] in workflows (#10369)
knqyf263
authored
aef4ecc
View commit details
Copy full SHA for aef4ecc
Browse repository at this point
chore: replace smithy epoch parsing with stdlib time.Unix (#10286)
Show description for 1962aa9
nikpivkin
authored
1962aa9
View commit details
Copy full SHA for 1962aa9
Browse repository at this point
test: update golden files for purl changes (#10372)
DmitriyLewen
authored
891cd79
View commit details
Copy full SHA for 891cd79
Browse repository at this point
ci: add zizmor to scan GitHub Actions workflows (#10322)
DmitriyLewen
authored
fb6a83a
View commit details
Copy full SHA for fb6a83a
Browse repository at this point
Commits on Mar 12, 2026
refactor: log statuses as strings (#10285)
Show description for 778a853
nikpivkin
authored
778a853
View commit details
Copy full SHA for 778a853
Browse repository at this point
ci: add build provenance attestations for release artifacts (#10316)
knqyf263
authored
88a91cf
View commit details
Copy full SHA for 88a91cf
Browse repository at this point
fix(sbom): add NOASSERTION for licenseDeclared/licenseConcluded in SPDX non-library packages (#10368)
DmitriyLewen
authored
33b9d8e
View commit details
Copy full SHA for 33b9d8e
Browse repository at this point
fix(report): set correct sarif ROOTPATH uri when scanning a git repository (#10366)
DmitriyLewen
authored
e5da6de
View commit details
Copy full SHA for e5da6de
Browse repository at this point
Commits on Mar 11, 2026
perf(plugin): optimize directory traversal by replacing filepath.Walk with filepath.WalkDir (#10325)
ankit98040
authored
d7fb355
View commit details
Copy full SHA for d7fb355
Browse repository at this point
docs: correct typos in CHANGELOG and diagram (#10320)
luojiyin1987
authored
a96cede
View commit details
Copy full SHA for a96cede
Browse repository at this point
chore: delete roadmap wf (#10295)
itaysk
authored
703de6d
View commit details
Copy full SHA for 703de6d
Browse repository at this point
Commits on Mar 10, 2026
ci(helm): bump Trivy version to 0.69.3 for Trivy Helm Chart 0.21.3 (#10310)
Show description for 66acebb
aqua-bot
and
actions-user
authored
66acebb
View commit details
Copy full SHA for 66acebb
Browse repository at this point
fix(cyclonedx): include CVSS v4 vulnerability ratings (#10313)
Show description for 2a4dfbf
drawliin
and
DmitriyLewen
authored
2a4dfbf
View commit details
Copy full SHA for 2a4dfbf
Browse repository at this point
Commits on Mar 6, 2026
fix: detected vulnerability fields in azure and mariner detector (#10275)
nimitjohri
authored
77f5cb5
View commit details
Copy full SHA for 77f5cb5
Browse repository at this point
Commits on Mar 5, 2026
ci: add persist-credentials: false to checkout steps (#10306)
knqyf263
authored
18e6028
View commit details
Copy full SHA for 18e6028
Browse repository at this point
Commits on Mar 2, 2026
ci(helm): bump Trivy version to 0.69.2 for Trivy Helm Chart 0.21.2 (#10270)
Show description for 2f62c94
aqua-bot
and
actions-user
authored
2f62c94
View commit details
Copy full SHA for 2f62c94
Browse repository at this point
Commits on Mar 1, 2026
chore(deps): bump the common group across 1 directory with 8 updates (#10248)
Show description for 9588325
dependabot[bot]
and
knqyf263
authored
9588325
View commit details
Copy full SHA for 9588325
Browse repository at this point
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#10257)
Show description for 01295f3
dependabot[bot]
and
knqyf263
authored
01295f3
View commit details
Copy full SHA for 01295f3
Browse repository at this point
chore(deps): bump the aws group across 1 directory with 6 updates (#10249)
Show description for a01f109
dependabot[bot]
authored
a01f109
View commit details
Copy full SHA for a01f109
Browse repository at this point
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#10241)
Show description for 5fe09eb
dependabot[bot]
authored
5fe09eb
View commit details
Copy full SHA for 5fe09eb
Browse repository at this point
ci: remove apidiff workflow (#10259)
knqyf263
authored
835a4ad
View commit details
Copy full SHA for 835a4ad
Browse repository at this point
Commits on Feb 26, 2026
chore(deps): bump github.com/docker/cli from 29.1.4+incompatible to 29.2.1+incompatible in the docker group across 1 directory (#10221)
Show description for 2a140f1
dependabot[bot]
authored
2a140f1
View commit details
Copy full SHA for 2a140f1
Browse repository at this point
ci: bump golangci-lint to v2.10 in cache-test-assets (#10243)
Show description for a0f6962
nikpivkin
authored
a0f6962
View commit details
Copy full SHA for a0f6962
Browse repository at this point
feat(java): add support for proxy configuration from Maven settings.xml (#10187)
Show description for 350fe33
Dharma-09
and
DmitriyLewen
authored
350fe33
View commit details
Copy full SHA for 350fe33
Browse repository at this point
chore(deps): bump the github-actions group across 3 directories with 11 updates (#10242)
Show description for ccf5a5a
dependabot[bot]
authored
ccf5a5a
View commit details
Copy full SHA for ccf5a5a
Browse repository at this point
feat(python): add pylock.toml support (#10137)
Show description for d0a3f63
DmitriyLewen
and
knqyf263
authored
d0a3f63
View commit details
Copy full SHA for d0a3f63
Browse repository at this point
Previous
Next
You can’t perform that action at this time.