v0.5.1

Changelog

74bf99b fix(token): use the credential from enviroment variable (#427)

Docker images

• docker pull docker.io/aquasec/trivy:0.5.1
• docker pull docker.io/aquasec/trivy:latest

v0.5.0

Changelog

3ed0cfb chore(goreleaser): drop BSD support temporarily (#424)
aca31df detector: Add LayerID to detect vulns (#419)
18b80e3 feat(cache): based on JSON (#398)
b83174f chore(README): add explanation for self-compiled binaries/packages (#413)
80bbe47 fix(gitlab): fix json generation on loop (#409)
7726963 fix(scanner): pass docker options as an argument (#408)
db2136b doc: Add Alpine Linux 3.11 to supported OS docs (#407)

Docker images

• docker pull docker.io/aquasec/trivy:0.5.0
• docker pull docker.io/aquasec/trivy:latest

v0.4.4

Changelog

42043a0 fix(client): add image name and build time (#402)
246793e fix(redhat): use binary package name for OVAL (#393)
692b0f1 cli: append warning when --template option is ignored (#391)
0629e1d fix(cli): reject multiple images (#392)
9707c7b Initial GitLab CI template to deeply integrated with GitLab Container Scanning (#376)
194fbef feat(): include GitLab template inside the docker container (#388)
f7db00c Modify template for GitLab Container Scanning (#387)
2f4b31e chore(goreleaser): bump up to 0.124.1 (#383)
9289624 doc: Update GitLab CI example documentation (#375)

Docker images

• docker pull docker.io/aquasec/trivy:0.4.4
• docker pull docker.io/aquasec/trivy:latest

v0.4.3

New Feature

Save the results using a template

$ trivy --format template --template "@/path/to/template" golang:1.12-alpine

See here for an example

Changelog

5a8749c chore: add install script (#370)
4a7fb52 fix typo in example of .gitlab-ci.yml (#373)
8888fca chore(goreleaser): change name_template to file_name_template (#369)
63a8c6d Integrate with Gitlab Container Scanning (#367)
fc222be chore: change a licence in goreleaser.yml (#365)
6132ff9 template: Load template from paths (#202)
87556aa Dockerfile: Update to alpine 3.11 (#361)

Docker images

• docker pull docker.io/aquasec/trivy:0.4.3
• docker pull docker.io/aquasec/trivy:latest

v0.4.2

Bug fixes

• Infinite loop when resolving dependencies of packages in Alpine #363
• Memory monster #362

Changelog

43362b2 Fix inifinite loop when resolving dependencies of packages in Alpine (#364)
db2d0c2 docker_engine_test: Add more OSes (#358)
922d493 Add EOL Date for alpine 3.11 (#359)

Docker images

• docker pull docker.io/aquasec/trivy:0.4.2
• docker pull docker.io/aquasec/trivy:latest

v0.4.1

Bug fixes

• #354
• #353

Changelog

c4811c3 chore(dep): update (#357)
0ec840b feat(client): retry HTTP request when getting an unavailable error (#350)
0b96d08 fix(integration-test): use a snapshot database for Docker mode (#352)

Docker images

• docker pull docker.io/aquasec/trivy:0.4.1
• docker pull docker.io/aquasec/trivy:latest

v0.4.0

New Features

Support Photon OS (#340)

$ trivy photon:3.0

Thank you, @masahiro331

Support SUSE Enterprise Linux / openSUSE (#337)

$ trivy opensuse/leap:15.0

Thank you, @masahiro331

Specify a directory to store image cache (#341)

Trivy could specify a directory to store the vulnerability database, but could not specify a directory to store image cache. Now, you can specify it with --cache-dir.

$ trivy --cache-dir /path/to/cache alpine:3.10

Add --token-headers option (#326)

Trivy uses Trivy-Token as a default token header. You can specify a custom header by --token-header.

$ trivy server --token foo --token-header x-trivy-token

$ trivy client --token foo --token-header x-trivy-token

Show progress when downloading the DB (#317)

$ trivy alpine:3.10
2019-12-27T14:44:26.345+0200    INFO    Need to update DB
2019-12-27T14:44:26.346+0200    INFO    Downloading DB...
3.04 MiB / 9.26 MiB [---------------------------->__________________________________________________________] 32.82% 1.14 MiB p/s ETA 5s

Buf fixes

Clear cache (#339)

$ trivy client --clear-cache

Changelog

7abd416 Delete requires for release (#345)
fcc193b Support Photon OS (#340)
44d74a7 chore(README): add 0.0.0.0 to the server example (#342)
4189855 fix(cache): specify a directory to store image cache (#341)
77f1abc Integration tests for docker mode (#335)
96d58cc fix(client): clear cache (#339)
823374b feat(client/server): add --token-headers option (#326)
b127c1c Support SUSE (#337)
b1ea09d Merge pull request #272 from aquasecurity/lizrice-patch-1
8c1c3df Merge branch 'master' into lizrice-patch-1
cee08c3 feat(db): show progress when downloading the DB (#317)
bc8f613 fix(writer): Refactor results struct (#327)
b9eddaf Merge branch 'master' into lizrice-patch-1
bdd1266 docs: note that some sources are non-commercial

Docker images

• docker pull docker.io/aquasec/trivy:0.4.0
• docker pull docker.io/aquasec/trivy:latest

v0.3.1

Bug fix

af584a8 Revert "change mod genuinetools/reg to vanilla (#297)" (#321)

Docker images

• docker pull docker.io/aquasec/trivy:0.3.1
• docker pull docker.io/aquasec/trivy:latest

v0.3.0

New Features

• Client/Server
  • trivy server and trivy client are available
  • See here for details
• Support Oracle Linux
  • Thank you, @masahiro331

Bug Fixes

• Possible false-positive on jq library #245
• fix(reset): reset before initializing DB #275

Changelog

74717b8 feat: support client/server mode (#295)
24fc88c Fix conduct strategy (#308)
1e9dcdb change mod genuinetools/reg to vanilla (#297)
7233b5f Update Gitlab example for Trivy 0.2.0 (#270)
3a53a88 refactor(app): use internal and separate configurations (#291)
6cbbb22 fix(alpine): handle rc version (#289)
b6a8af5 chore(windows): remove (#278)
30c1a00 Update readme (#287)
b345342 Add oracle linux support (#286)
438680f fix(reset): reset before initializing DB (#275)
740c2c4 chore(log): add debug messages (#284)

Docker images

• docker pull docker.io/aquasec/trivy:0.3.0
• docker pull docker.io/aquasec/trivy:latest

v0.2.1

Changes

• Support GITHUB_TOKEN for rate limiting
• Ignore files under vendor dir to avoid false positives
• New logo

Changelog

35429e3 chore(logo): replace with new logo (#269)
fb26541 chore(clear-cache): add an explanation (#276)
15af65b feat(github): add GITHUB_TOKEN for rate limiting (#281)
c2fdfab fix(lockfile): ignore files under vendor dir (#279)

Docker images

• docker pull docker.io/aquasec/trivy:0.2.1
• docker pull docker.io/aquasec/trivy:latest