-
QuestionOn version 0.52.0, I get a 'Results' object containing Targets even if there were no Vulnerabilities found: trivy repo https://github.com/someorg/somerepo -f json
On version 0.51.4, I don't get a Results object:
I was reading the changelog but couldn't identify whether this was a deliberate change or a regression. It's not a big deal, but I had some custom tooling that reacts to whether there's a 'Results' object at all or not, which caused some false positives. Can anyone confirm if this is intentional or accidental? TargetGit Repository ScannerVulnerability Output FormatJSON ModeStandalone Operating SystemDebian 12 VersionVersion: 0.52.0 |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
Hello @mig5 Now we always save @knqyf263 did you expect this? Either we should not check |
Beta Was this translation helpful? Give feedback.
Yes, intended. The community raised requests that Trivy should show results even if there are no vulnerabilities.