aquasecurity trivy Bugs Discussions
Bugs Discussions
Something doesn't work as expected
-
You must be logged in to vote Gradle lockfile to CycloneDX: Fill in "component.group"
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote False positive for CVE-2023-51074 (json-path)
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Alpine 3.19's EOL date is not reported
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Misconfiguration scanner doesn't exclude downloaded Terraform module
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote AWS scan not logging in correctly when using AWS STS
kind/bugCategorizes issue or PR as related to a bug. help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Inconsistent Severity Levels Reported for Same CVE
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote CIS cluster scan fails to execute
kind/bugCategorizes issue or PR as related to a bug. target/kubernetesIssues relating to kubernetes cluster scanning -
You must be logged in to vote AWS SDK update in v0.48.1 contained a breaking change requiring service SDK updates
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Not detecting tokens properly in ENV in Docker images
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Findings don't display in Github Advanced Security UI correctly
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Vulnerability reported on
kind/bug@group/namedependency when actual vulnerability exists onnamedependencyCategorizes issue or PR as related to a bug. -
You must be logged in to vote A Kubernetes resource with a malformed image reference (
kind/bugbusybox:la!e$t) crashes the whole scanCategorizes issue or PR as related to a bug. target/kubernetesIssues relating to kubernetes cluster scanning -
You must be logged in to vote avd-aws-0006 and avd-aws-0007 false positives (Athena)
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Unexpected JSON output when
kind/bug--report summaryis set intrivy k8sfor multi-container workloadsCategorizes issue or PR as related to a bug. target/kubernetesIssues relating to kubernetes cluster scanning -
You must be logged in to vote Vendor for RPM packages
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote bug: not possible to filter misconfiguration in AWS scan
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote bug: KSV028 csi is an allowed volume type
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy operator unexpected result for exception (empty message)
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Stack overflow from using
kind/buginput.aws.iam.groups[_]in RegoCategorizes issue or PR as related to a bug. -
You must be logged in to vote unable to scan ami with trivy 0.48.1 due to access permission issue
kind/bugCategorizes issue or PR as related to a bug. triage/duplicateIndicates an issue is a duplicate of other open issue. -
You must be logged in to vote readOnlyRootFilesystem should be considered high and not low severity
kind/bugCategorizes issue or PR as related to a bug. scan/misconfigurationIssues relating to misconfiguration scanning -
You must be logged in to vote Trivy is not able to detect license for scoped NPM dependencies
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Trivy does not manage 2nd level Maven BOM (or BOM inside another BOM)
kind/bugCategorizes issue or PR as related to a bug. -
You must be logged in to vote Output report in Json format is missing vulnerability information
kind/bugCategorizes issue or PR as related to a bug.
