14 Pull requests merged by 5 people

• docs: fix a broken link

  #8546 merged Mar 13, 2025

• fix(fs): check postAnalyzers for StaticPaths

  #8543 merged Mar 13, 2025

• refactor(misconf): remove unused methods for ec2.Instance

  #8536 merged Mar 13, 2025

• feat(misconf): adapt aws_default_security_group

  #8538 merged Mar 13, 2025

• feat(fs): optimize scanning performance by direct file access for known paths

  #8525 merged Mar 13, 2025

• feat(misconf): adapt AWS::DynamoDB::Table

  #8529 merged Mar 11, 2025

• style: Fix MD syntax in self-hosting.md

  #8523 merged Mar 11, 2025

• perf(misconf): retrieve check metadata from annotations once

  #8478 merged Mar 11, 2025

• feat(misconf): Add support for aws_ami

  #8499 merged Mar 11, 2025

• fix(misconf): skip Azure CreateUiDefinition

  #8503 merged Mar 11, 2025

• refactor(misconf): use OPA v1

  #8518 merged Mar 11, 2025

• fix(misconf): add ephemeral block type to config schema

  #8513 merged Mar 11, 2025

• perf(misconf): parse input for Rego once

  #8483 merged Mar 8, 2025

• feat: replace TinyGo with standard Go for WebAssembly modules

  #8496 merged Mar 7, 2025

7 Pull requests opened by 4 people

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.207.1 to 1.208.0 in the aws group

  #8520 opened Mar 10, 2025

• chore(deps): bump the common group with 6 updates

  #8521 opened Mar 10, 2025

• fix(misconf): do not skip loading documents from subdirectories

  #8526 opened Mar 11, 2025

• refactor(misconf): Simplify misconfig checks bundle parsing

  #8533 opened Mar 12, 2025

• feat(misconf): adapt AWS::EC2::VPC

  #8534 opened Mar 12, 2025

• feat(nodejs): add root and workspace for `yarn` packages

  #8535 opened Mar 12, 2025

• fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig

  #8548 opened Mar 13, 2025

6 Issues closed by 3 people

• feat(checks): Add check for checking `owners` of AMI

  #8480 closed Mar 13, 2025

• Optimize rootfs scanning by using static paths instead of full filesystem traversal

  #8481 closed Mar 13, 2025

• docs(misconf): Improve documentation for filtering

  #5394 closed Mar 11, 2025

• fix(misconf): skip Azure CreateUiDefinition

  #8500 closed Mar 11, 2025

• bug(terraform): Trivy does not scan configuration with ephemeral blocks

  #8515 closed Mar 11, 2025

• [False positive] AVD-AWS-0010 in aws_cloudfront_distribution

  #8510 closed Mar 7, 2025

4 Issues opened by 3 people

• bug(k8s): trivy k8s scan throws panic: runtime error: slice bounds out of range error

  #8542 opened Mar 13, 2025

• bug(misconf): AVD-AWS-0022 false positive

  #8530 opened Mar 11, 2025

• feat(license): scan `vendor` directory for license for `go.mod` files

  #8527 opened Mar 11, 2025

• bug(sbom): Trivy only checks parents from the current result when plotting the dependency graph

  #8516 opened Mar 10, 2025

7 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• docs(python): Mention pip-compile

  #8484 commented on Mar 10, 2025 • 1 new comment

• fix: use `--file-patterns` flag for all post analyzers

  #7365 commented on Mar 13, 2025 • 0 new comments

• feat(misconf): Add fallback support for trivy-checks

  #8062 commented on Mar 12, 2025 • 0 new comments

• fix dpkg symlink license problem for image scan

  #8432 commented on Mar 12, 2025 • 0 new comments

• test(terraform): test to demonstrate 'count' meta argument incorrectl…

  #8479 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump the docker group across 1 directory with 3 updates

  #8501 commented on Mar 10, 2025 • 0 new comments

• release: v0.61.0 [main]

  #8507 commented on Mar 13, 2025 • 0 new comments