Update aquasec/trivy Docker tag to v0.70.0#45
Conversation
alaudaa-renovate
Bot
added
the
dependencies
🤖 AI Code Review
SummaryThis PR updates the Trivy Docker image version from v0.67.2 to v0.70.0 in both Dockerfile and Dockerfile.dev. The changes are straightforward version bumps performed by Renovate Bot. The update includes security fixes and new features from the Trivy release notes. Review Statistics
Critical Issues
(None) Warnings
(None) Suggestions
Positive Feedback
ℹ️ About this reviewThis review was automatically generated using the
|
alaudaa-renovate
Bot
force-pushed
the
renovate/aquasec-trivy-0.x
branch
from
6d9c450 to
ef01e95
Compare
alaudaa-renovate
Bot
changed the title
| @@ -1,5 +1,5 @@ | |||
| # That's the only place where you're supposed to specify version of Trivy. | |||
There was a problem hiding this comment.
Suggestion (style/documentation): Consider tracking Trivy EOL dates to proactively update before versions become unsupported. Current v0.67.2 → v0.69.3 jump includes v0.69.0 with a breaking change in misconfiguration provider IDs.
| @@ -1,5 +1,5 @@ | |||
| # That's the only place where you're supposed to specify version of Trivy. | |||
There was a problem hiding this comment.
Suggestion (style/documentation): Same as Dockerfile - consider EOL tracking for Trivy versions.
alaudaa-renovate
Bot
force-pushed
the
renovate/aquasec-trivy-0.x
branch
from
ef01e95 to
4e35147
Compare
alaudaa-renovate
Bot
changed the title
alaudaa-renovate
Bot
changed the title
| @@ -1,5 +1,5 @@ | |||
| # That's the only place where you're supposed to specify version of Trivy. | |||
There was a problem hiding this comment.
Suggestion (docs/missing): Consider verifying that v0.70.0 works correctly with the scanner. The v0.69.0 breaking change (ID instead of AVDID for providers mapping in misconf) affects configuration scanning, but this scanner primarily uses vulnerability scanning via the image subcommand. A quick integration test would confirm compatibility.
| @@ -1,5 +1,5 @@ | |||
| # That's the only place where you're supposed to specify version of Trivy. | |||
There was a problem hiding this comment.
Suggestion (style/documentation): Same as Dockerfile - consider verifying v0.70.0 compatibility via integration test.
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
|
🚨 Stale Pull Request Warning This pull request has been inactive for 32 days. Automated Actions Schedule:
To keep this PR active:
Protected branches (won't be deleted): This is an automated message. Reply to this comment to reset the inactivity timer. |
2 participants
This PR contains the following updates:
0.67.2->0.70.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
aquasecurity/trivy (aquasec/trivy)
v0.70.0Compare Source
Features
Bug Fixes
Performance Improvements
v0.69.3Compare Source
Changelog
6fb20c8release: v0.69.3 [release/v0.69] (#10293)dabefecfix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)v0.69.2Compare Source
Changelog
cfa322erelease: v0.69.2 [release/v0.69] (#10266)86debcefix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)cf3d4cdfix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)6dfd3b0ci: remove apidiff workflowv0.69.1Compare Source
v0.69.0Compare Source
⚠ BREAKING CHANGES
Features
package-lock.jsonfile (#9983) (b64d5ad)Bug Fixes
Performance Improvements
Code Refactoring
v0.68.2Compare Source
v0.68.1Compare Source
Bug Fixes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.