Replies: 1 comment
-
Hi @el-chazmo ! tfsec is now part of Trivy: aquasecurity/tfsec#1994. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Description
when running
go install github.com/aquasecurity/tfsec/cmd/tfsec@latest
this attempts to download go-getter v1.7.0 from https://proxy.golang.org/github.com/hashicorp/go-getter/@v/v1.7.0.zip and this is presenting as a virus.
Has anyone else experienced this?
Could go-getter be upgraded to 1.7.1 or 1.7.2 in the tfsec go.mod file?
Desired Behavior
no errors seen when performing a go install
Actual Behavior
go: downloading github.com/hashicorp/go-getter v1.7.0
../../../go/pkg/mod/github.com/aquasecurity/defsec@v0.84.1/pkg/scanners/terraform/parser/resolvers/remote.go:11:2: github.com/hashicorp/go-getter@v1.7.0: reason=Trojan
reasoncode=AV_AUTHENTIUM_VIRUS_SW_MW_BLOCK
Reproduction Steps
Target
None
Scanner
None
Output Format
None
Mode
None
Debug Output
Operating System
WSL Ubuntu 22.04.3 LTS
Version
Checklist
trivy image --reset
Beta Was this translation helpful? Give feedback.
All reactions