chore(deps): update ghcr.io/aquasecurity/trivy docker tag to v0.46.0
This MR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| ghcr.io/aquasecurity/trivy | image-name | minor |
0.45.1 -> 0.46.0
|
Release Notes
aquasecurity/trivy (ghcr.io/aquasecurity/trivy)
v0.46.0
Changelog
-
cbbd1cefeat(k8s): add support for vulnerability detection (#5268) -
24a0d92fix(python): override BOM inrequirements.txtfiles (#5375) -
0c3e2f0docs: add kbom documentation (#5363) -
6c12f04test: use maximize build space for VM tests (#5362) -
c413422chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365) -
20ab703fix(report): add escaping quotes in misconfig Title for asff template (#5351) -
91841f5ci: add workflow to check Go versions of dependencies (#5340) -
57ba05cchore(deps): Upgrade defsec to v0.93.1 (#5348) -
fef3ed4chore(deps): bump alpine from 3.18.3 to 3.18.4 (#5300) -
ced54acfix: Report error when os.CreateTemp fails (to be consistent with other uses) (#5342) -
2798df9fix: add config files to FS for post-analyzers (#5333) -
af485b3fix: fix MIME warnings after updating to Go 1.20 (#5336) -
008babfbuild: fix a compile error with Go 1.21 (#5339) -
00d9c46feat: addedMetadatainto the k8s resource's scan report (#5322) -
03b6787ci: check only MR's inactions/stale(#5337) -
e6d5889chore: update adopters template (#5330) -
74dbd8aci: do not trigger tests on the push event (#5313) -
393bfdcfix(sbom): use PURL or Group and Name in case of Java (#5154) -
76eb8a5docs: add buildkite repository to ecosystem page (#5316) -
6c74ee1chore(deps): bump docker/setup-qemu-action from 2 to 3 (#5290) -
6119878chore(deps): bump docker/setup-buildx-action from 2 to 3 (#5292) -
a346587chore(deps): bump actions/cache from 3.3.1 to 3.3.2 (#5293) -
7e613ccchore(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#5286) -
f05bc4bchore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.2 (#5289) -
3be5e6bchore: enable go-critic (#5302) -
f6cd21cchore(deps): bump actions/checkout from 3.6.0 to 4.1.0 (#5288) -
f7b9751chore(deps): bump github.com/aws/aws-sdk-go from 1.45.3 to 1.45.19 (#5287) -
18d1687close java-db client (#5273) -
eb60e9fchore(deps): bump docker/login-action from 2 to 3 (#5291) -
5a92055chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#5294) -
46afe65chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) -
0bf2a11chore(deps): bump github.com/opencontainers/image-spec (#5295) -
23b5fecfix(report): removes git::http from uri in sarif (#5244) -
4f1d576Improve the meaning of sentence (#5301) -
6ab2bdfchore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.2.2 (#5297) -
4217cffchore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#5296) -
1840584add app nil check (#5274) -
c5ae9f2typo: in secret.md (#5281) -
562723fdocs: add info aboutgithubformat (#5265) -
3dd5b1efeat(dotnet): add license support for NuGet (#5217) -
5c18475docs: correctly export variables (#5260) -
0c08ddechore: Add line numbers for lint output (#5247) -
0ccbb4fchore(cli): disable java-db flags in server mode (#5263) -
908a491feat(db): allow passing registry options (#5226) -
5b4652dchore(deps): Bump up defsec to v0.93.0 (#5253) -
faf8d49refactor(purl): use TypeApk from purl (#5232) -
559c0f3chore: enable more linters (#5228) -
2baad46ci: bump GoReleaser from 1.16.2 to 1.20.0 (#5236) -
df2bff9Fix typo on ide.md (#5239) -
44656f2refactor: use defined types (#5225) -
37af529fix(purl): skip local Go packages (#5190) -
eea3320docs: update info about license scanning in Yarn projects (#5207) -
2e66620ci: auto apply labels (#5200) -
49680dcfix link (#5203)
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.