Skip to content

chore(deps): update ghcr.io/aquasecurity/trivy docker tag to v0.54.0

Tortoise caretaker requested to merge renovate/ghcr.io-aquasecurity-trivy-0.x into main

This MR contains the following updates:

Package Type Update Change
ghcr.io/aquasecurity/trivy (source) image-name minor 0.53.0 -> 0.54.0

Release Notes

aquasecurity/trivy (ghcr.io/aquasecurity/trivy)

v0.54.0

Compare Source

Features
Bug Fixes
  • Add dependencyManagement exclusions to the child exclusions (#​6969) (dc68a66)
  • add missing platform and type to spec (#​7149) (c8a7abd)
  • cli: error on missing config file (#​7154) (7fa5e7d)
  • close file when failed to open gzip (#​7164) (2a577a7)
  • dotnet: don't include non-runtime libraries into report for *.deps.json files (#​7039) (5bc662b)
  • dotnet: show nuget package dir not found log only when checking nuget packages (#​7194) (d76feba)
  • ignore nodes when listing permission is not allowed (#​7107) (25f8143)
  • java: avoid panic if deps from pom in it dir are not found (#​7245) (4e54a7e)
  • java: use go-mvn-version to remove Package duplicates (#​7088) (a7a304d)
  • misconf: do not evaluate TF when a load error occurs (#​7109) (f27c236)
  • nodejs: detect direct dependencies when using latest version for files yarn.lock + package.json (#​7110) (54bb8bd)
  • report: hide empty table when all secrets/license/misconfigs are ignored (#​7171) (c3036de)
  • secret: skip regular strings contain secret patterns (#​7182) (174b1e3)
  • secret: trim excessively long lines (#​7192) (92b13be)
  • secret: update length of hugging-face-access-token (#​7216) (8c87194)
  • server: pass license categories to options (#​7203) (9d52018)
Performance Improvements
  • debian: use bytes.Index in emptyLineSplit to cut allocation (#​7065) (acbec05)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.

Merge request reports

Loading