security-scanner-1.10.0

security-scanner 1.10.0

Base image with Trivy, Hadolint and Betterleaks for Linux/amd64 and Linux/arm64

Docker Image

Tag	Image
Patch version	ghcr.io/tooark/security-scanner:1.10.0
Minor version	ghcr.io/tooark/security-scanner:1.10
Major version	ghcr.io/tooark/security-scanner:1
Latest	ghcr.io/tooark/security-scanner:latest

Included Tools

Tool	Version
Trivy	0.74.0
Hadolint	2.15.1
Betterleaks	1.8.1

Trivy Ignore (.trivyignore)

# Justificativa:
# Exceções temporárias de CVE aceitas para esta imagem em contexto de pipeline.
# Usar somente para CVEs especificas com correção pendente/upstream.
#
# Revisão:
# 2026-10-13 (ou antes, ao atualizar base/pacotes da imagem).

# security-scanner:latest (debian 13.6) (debian) - gzip
CVE-2026-41992

# security-scanner:latest (debian 13.6) (debian) - libpcre2-8-0
CVE-2026-86145
CVE-2026-89161

# security-scanner:latest (debian 13.6) (debian) - libperl5.40
CVE-2026-13221
CVE-2026-42496
CVE-2026-42497
CVE-2026-48962
CVE-2026-57432
CVE-2026-57433
CVE-2026-8376

# security-scanner:latest (debian 13.6) (debian) - libsqlite3-0
CVE-2026-11822
CVE-2026-11824

# security-scanner:latest (debian 13.6) (debian) - libssh2-1t64
CVE-2026-58050

# security-scanner:latest (debian 13.6) (debian) - perl
CVE-2026-13221
CVE-2026-42496
CVE-2026-42497
CVE-2026-48962
CVE-2026-57432
CVE-2026-57433
CVE-2026-8376

# security-scanner:latest (debian 13.6) (debian) - perl-base
CVE-2026-13221
CVE-2026-42496
CVE-2026-42497
CVE-2026-48962
CVE-2026-57432
CVE-2026-57433
CVE-2026-8376

# security-scanner:latest (debian 13.6) (debian) - perl-modules-5.40
CVE-2026-13221
CVE-2026-42496
CVE-2026-42497
CVE-2026-48962
CVE-2026-57432
CVE-2026-57433
CVE-2026-8376

# usr/local/bin/betterleaks (gobinary) - golang.org/x/crypto
CVE-2026-56854

# usr/local/bin/betterleaks (gobinary) - stdlib
CVE-2026-33818
CVE-2026-39821
CVE-2026-56853
CVE-2026-56858
CVE-2026-56859
CVE-2026-56860
CVE-2026-56862

# usr/local/bin/trivy (gobinary) - google.golang.org/grpc
CVE-2026-84304
CVE-2026-84445