Skip to content

Tags: future-architect/vuls

Tags

v0.29.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
feat(contrib/trivy-to-vuls): add version in LibraryFixedIns (#2121)

v0.28.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix(scanner/suse): skip table header in zypper -q lu (#2093)

v0.28.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
chore(deps): bump the aws group with 5 updates (#2073)

Bumps the aws group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.5` | `1.32.6` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.5` | `1.28.6` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.46` | `1.17.47` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.68.0` | `1.70.0` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.33.1` | `1.33.2` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.32.5 to 1.32.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.32.5...v1.32.6)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.28.5 to 1.28.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.28.5...config/v1.28.6)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.46 to 1.17.47
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.46...credentials/v1.17.47)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.68.0 to 1.70.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.68.0...service/s3/v1.70.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.1 to 1.33.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.33.1...service/sfn/v1.33.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

v0.27.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
chore(deps): bump github.com/aquasecurity/trivy from 0.55.2 to 0.56.1 (

…#2044)

Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.55.2 to 0.56.1.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/v0.56.1/CHANGELOG.md)
- [Commits](aquasecurity/trivy@v0.55.2...v0.56.1)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com>

v0.26.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix(config/os): Fix EOL date of ubuntu 23.10 (#1972)

cf. https://lists.ubuntu.com/archives/ubuntu-announce/2024-June/000302.html

v0.26.0-rc2

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix(ci): Remove unused files to avoid disk full (#1957)

cf.
- https://zenn.dev/pinto0309/scraps/c6413eb15a1b2a (in Japanese)
- actions/runner-images#709

v0.26.0-alpha3

fix(build): Remove unused files to avoid disk full

cf.
- https://zenn.dev/pinto0309/scraps/c6413eb15a1b2a (in Japanese)
- actions/runner-images#709

v0.25.4

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
feat(detector, contrib/trivy-to-vuls): collect vendor severity and cv…

…ss (#1921)

v0.25.3

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
feat(detect/redhat): detect unpatched vulnerabilities with oval, stop…

… using gost (#1907)

* feat(oval/redhat): detect not fixed package

* feat(gost/redhat): stop using to detect unpatched vulnerabilities

v0.25.2

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
chore(deps): bump github.com/aws/aws-sdk-go from 1.49.21 to 1.51.5 (#…

…1881)

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.49.21 to 1.51.5.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](aws/aws-sdk-go@v1.49.21...v1.51.5)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>