⚡ Highlights ⚡

👉 #10546

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16

Changelog

• 6fb20c8 release: v0.69.3 [release/v0.69] (#10293)
• dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)

Changelog

• cfa322e release: v0.69.2 [release/v0.69] (#10266)
• 86debce fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)
• cf3d4cd fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)
• 6dfd3b0 ci: remove apidiff workflow

Changelog

• a0047a7 feat(alpine): warn mixing versions (#2000)
• d786655 Update ASFF template (#1914)
• a02cf65 chore(deps): replace containerd/containerd version to fix CVE-2022-23648 (#1994)
• 613e38c chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
• 3b6d65b test(go): add integration tests for gomod (#1989)
• 22f5b93 fix(python): fixed panic when scan .egg archive (#1992)
• 485637c fix(go): set correct go modules type (#1990)
• 6fdb554 feat(alpine): support apk repositories (#1987)
• d9bddb9 docs: add CBL-Mariner (#1982)
• 1cf1873 docs(go): fix version (#1986)
• d77dbe8 feat(go): support go.mod in Go 1.17+ (#1985)
• 32bd1e4 ci: fix URLs in the PR template (#1972)
• 94a5a18 ci: add semantic pull requests check (#1968)
• 72d94b2 docs(issue): added docs for wrong detection issues (#1961)

Changelog

• b4a7d6a docs: move CONTRIBUTING.md to docs (#1971)
• 0127c1d refactor(table): use file name instead package path (#1966)
• a92da72 fix(sbom): add --db-repository (#1964)
• b0f3864 feat(table): add PkgPath in table result (#1960)
• 0b1d32c fix(pom): merge multiple pom imports in a good manner (#1959)

Changelog

• d4e3df8 fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
• 7e48cc1 fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
• c9efa8c fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
• 52b7154 feat(jar): allow setting Maven Central URL using environment variable (#1939)
• 21f7a41 chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
• ff2b3d1 chore(chart): remove version comments (#1933)

Changelog

• 9c19298 fix(downloadDB): add flag to server command (#1942)

Changelog

• aa3d696 fix(misconf): update defsec to resolve panics (#1935)
• 31e7669 chore(deps): bump github.com/docker/docker (#1924)
• 4ca35b2 docs: restructure the documentation (#1887)
• 8da4548 chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
• 76e9d7e chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
• 2b217a3 chore(deps): bump actions/checkout from 2 to 3 (#1916)
• 902aa8c chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
• 60b19e5 chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
• 58aab67 chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
• 209b9cc chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
• bfb931d Add trivy horizontal logo (#1932)
• ae86a5b chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
• 1a23039 chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
• 56498ca chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
• 0210567 feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)

Changelog

• 4470a18 docs(filter vulnerabilities): fix link (#1880)
• cb171ea feat(template) Add misconfigurations to gitlab codequality report (#1756)
• 36e24b1 fix(rpc): add PkgPath field to client / server mode (#1643)
• 8831174 fix(vulnerabilities): fixed trivy-db vulns (#1883)
• 9154b81 feat(cache): remove temporary cache after filesystem scanning (#1868)
• f36d9b6 feat(sbom): add a dedicated sbom command (#1799)
• 7a14808 feat(cyclonedx): add vulnerabilities (#1832)
• df80fd3 fix(option): hide false warning about remote options (#1865)
• 88ebc07 chore: bump up Go to 1.18 (#1862)
• d6418cf feat(filesystem): scan in client/server mode (#1829)
• 12d0317 refactor(template): remove unused test (#1861)
• c3aca15 fix(cli): json format for trivy version (#1854)
• b2b6895 docs: change URL for tfsec-checks (#1857)

Changelog

• 06659f1 fix(docker): Getting images without a tag (#1852)
• a91cc50 docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)