List view

bug(license): Trivy splits licenses that include the WITH separator when determining the category.

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Bug

#9379 In aquasecurity/trivy;

· DmitriyLewen opened on Aug 25, 2025

feat: add SHA-512 hash support for SBOM formats (CycloneDX and SPDX)

good first issueDenotes an issue ready for a new contributor, according to the "help wanted" guidelines.Denotes an issue ready for a new contributor, according to the "help wanted" guidelines.

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/sbomIssues relating to SBOMIssues relating to SBOM

Status: Open.

Feature

#9094 In aquasecurity/trivy;

· knqyf263 opened on Jun 30, 2025

feat(misconf): add support for ARM resources declared with symbolic names

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9467 In aquasecurity/trivy;

· simar7 opened on Sep 10, 2025

feat(cloudformation): add support for Fn::ForEach intrinsic function

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9353 In aquasecurity/trivy;

· nikpivkin opened on Aug 18, 2025

bug(cyclonedx): Trivy panics when scanning an SBOM in CycloneDX format if the file has an empty metadata component.

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/sbomIssues relating to SBOMIssues relating to SBOM

Status: Open.

Bug

#9561 In aquasecurity/trivy;

· DmitriyLewen opened on Oct 1, 2025

bug: trivy convert always filters non-failures

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

Bug

#8670 In aquasecurity/trivy;

· simar7 opened on Apr 2, 2025

BREAKING: Deprecate <code>avd_id</code> and <code>short_code</code> for misconfiguration checks

kind/breakingCategorizes issue or PR as related to breaking compatibility.Categorizes issue or PR as related to breaking compatibility.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

#9064 In aquasecurity/trivy;

· simar7 opened on Jun 23, 2025

feat: support download of configs from Trivy cloud

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

Status: Open.

Feature

#9672 In aquasecurity/trivy;

· owenrumney opened on Oct 16, 2025

feat: include registry and repository in artifact ID calculation

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

target/container-imageIssues relating to container image scanningIssues relating to container image scanning

Status: Open.

Feature

#9678 In aquasecurity/trivy;

· knqyf263 opened on Oct 16, 2025

release: v0.68.0 [main]

autorelease: pending

Status: Open (in progress).

aquasecurity/trivynumber 9549

#9549 In aquasecurity/trivy;

· aqua-bot opened on Sep 30, 2025