chore(deps): Update dependency trivy to v0.67.0
This MR contains the following updates:
Package | Update | Change |
---|---|---|
trivy | minor |
0.66.0 -> 0.67.0
|
Release Notes
aquasecurity/trivy (trivy)
v0.67.0
Features
- add documentation URL for database lock errors (#9531) (eba48af)
- cli: change --list-all-pkgs default to true (#9510) (7b663d8)
- cloudformation: support default values and list results in Fn::FindInMap (#9515) (42b3bf3)
- cyclonedx: preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439) (aff03eb)
- redhat: add os-release detection for RHEL-based images (#9458) (cb25a07)
- sbom: added support for CoreOS (#9448) (6d562a3)
- seal: add seal support (#9370) (e4af279)
Bug Fixes
-
aws: use
BuildableClient
insead ofxhttp.Client
(#9436) (fa6f1bf) - close file descriptors and pipes on error paths (#9536) (a4cbd6a)
- db: Dowload database when missing but metadata still exists (#9393) (92ebc7e)
- k8s: disable parallel traversal with fs cache for k8s images (#9534) (c0c7a6b)
- misconf: handle tofu files in module detection (#9486) (bfd2f6b)
- misconf: strip build metadata suffixes from image history (#9498) (c938806)
- misconf: unmark cty values before access (#9495) (8e40d27)
- misconf: wrap legacy ENV values in quotes to preserve spaces (#9497) (267a970)
- nodejs: parse workspaces as objects for package-lock.json files (#9518) (404abb3)
-
nodejs: use snapshot string as
Package.ID
for pnpm packages (#9330) (4517e8c) - vex: don't suppress vulns for packages with infinity loop (#9465) (78f0d4a)
-
vuln: compare
nuget
package names in lower case (#9456) (1ff9ac7)
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.