1 Release published by 1 person

• v0.58.1

  published Dec 24, 2024

18 Pull requests merged by 5 people

• refactor(python): use once + debug for License acquired from METADATA... logs

  #8175 merged Dec 25, 2024

• refactor: use slices package instead of custom function

  #8172 merged Dec 25, 2024

• chore(deps): bump the common group with 6 updates

  #8162 merged Dec 24, 2024

• feat(python): add support for uv dev and optional dependencies

  #8134 merged Dec 24, 2024

• feat(python): add support for poetry dev dependencies

  #8152 merged Dec 24, 2024

• release: v0.58.1 [release/v0.58]

  #8120 merged Dec 24, 2024

• fix(sbom): attach nested packages to Application [backport: release/v0.58]

  #8168 merged Dec 24, 2024

• fix(sbom): attach nested packages to Application

  #8144 merged Dec 24, 2024

• docs(vex): use debian minor version in examples

  #8166 merged Dec 24, 2024

• refactor: add generic Set implementation

  #8149 merged Dec 24, 2024

• chore(deps): bump the aws group across 1 directory with 6 updates

  #8163 merged Dec 23, 2024

• fix(python): skip dev group's deps for poetry [backport: release/v0.58]

  #8158 merged Dec 23, 2024

• fix(sbom): use root package for unknown dependencies (if exists) [backport: release/v0.58]

  #8156 merged Dec 23, 2024

• fix(python): skip dev group's deps for poetry

  #8106 merged Dec 23, 2024

• fix(sbom): use root package for unknown dependencies (if exists)

  #8104 merged Dec 23, 2024

• chore(deps): bump golang.org/x/net from v0.32.0 to v0.33.0 [backport: release/v0.58]

  #8142 merged Dec 20, 2024

• chore(deps): bump golang.org/x/net from v0.32.0 to v0.33.0

  #8140 merged Dec 20, 2024

• chore(vex): suppress CVE-2024-45338

  #8137 merged Dec 20, 2024

7 Pull requests opened by 5 people

• ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0

  #8170 opened Dec 24, 2024

• feat: add report summary table

  #8177 opened Dec 25, 2024

• feat(image): prevent scanning oversized container images

  #8178 opened Dec 25, 2024

• chore: remove aws iam related scripts

  #8179 opened Dec 26, 2024

• docs: delete unneeded versions

  #8183 opened Dec 26, 2024

• docs: Updated JSON schema version 2 in the trivy documentation

  #8185 opened Dec 26, 2024

• feat(image): add progress bar for image layer pulling

  #8186 opened Dec 26, 2024

5 Issues closed by 1 person

• Fetch db as a container from registry

  #294 closed Dec 26, 2024

• enhancement(python): use one info and multiple debug logs for `License acquired from METADATA...` message

  #8160 closed Dec 25, 2024

• bug(sbom): multiple Results for one package with root relationship for `sbom` mode

  #8143 closed Dec 24, 2024

• bug(python): Trivy doesn't skip dev deps for some versions of poetry

  #8096 closed Dec 23, 2024

• bug(bom): `unknown` dependencies are related to application component and not root component

  #8102 closed Dec 23, 2024

7 Issues opened by 4 people

• fix(misconf): improve CIDR related checks

  #8184 opened Dec 26, 2024

• Incorrect versions in website version selector

  #8182 opened Dec 26, 2024

• feat: add `--severity-src` flag to customize vulnerability severity selection

  #8180 opened Dec 26, 2024

• feat: prevent scanning oversized container images

  #8176 opened Dec 25, 2024

• enhancement(cyclonedx): use `Compositions` field for dependencies with `unknown` relationships

  #8157 opened Dec 23, 2024

• fix(sarif): check url before converting to string

  #8154 opened Dec 21, 2024

• fix(sarif): handle empty `artifactLocation.uri` fields

  #8141 opened Dec 20, 2024

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• refactor: use UUID for Packages IDs from `pom.xml` files.

  #7879 commented on Dec 25, 2024 • 3 new comments

• fix(secret): set minimal number of characters for AsymmetricPrivateKey

  #7700 commented on Dec 26, 2024 • 0 new comments

• Show progress when fetching layers

  #330 commented on Dec 26, 2024 • 0 new comments

• fix(sbom): detect OS from `purl` if OS component not found

  #7101 commented on Dec 27, 2024 • 0 new comments

• release: v0.59.0 [main]

  #8041 commented on Dec 25, 2024 • 0 new comments