chore(deps): update docker.io/aquasec/trivy docker tag to v0.46.0 (!935) · Merge requests · Shivering-Isles / Infrastructure GitOps

Merged Botaniker (Bot) requested to merge renovate/docker.io-aquasec-trivy-0.x into main 1 year ago

This MR contains the following updates:

Package	Update	Change
docker.io/aquasec/trivy	minor	`0.45.1` -> `0.46.0`

Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy)

`v0.46.0`

Compare Source

Release highlights and summary

https://github.com/aquasecurity/trivy/discussions/5377

Changelog

cbbd1ce feat(k8s): add support for vulnerability detection (#5268)
24a0d92 fix(python): override BOM in requirements.txt files (#5375)
0c3e2f0 docs: add kbom documentation (#5363)
6c12f04 test: use maximize build space for VM tests (#5362)
c413422 chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365)
20ab703 fix(report): add escaping quotes in misconfig Title for asff template (#5351)
91841f5 ci: add workflow to check Go versions of dependencies (#5340)
57ba05c chore(deps): Upgrade defsec to v0.93.1 (#5348)
fef3ed4 chore(deps): bump alpine from 3.18.3 to 3.18.4 (#5300)
ced54ac fix: Report error when os.CreateTemp fails (to be consistent with other uses) (#5342)
2798df9 fix: add config files to FS for post-analyzers (#5333)
af485b3 fix: fix MIME warnings after updating to Go 1.20 (#5336)
008babf build: fix a compile error with Go 1.21 (#5339)
00d9c46 feat: added Metadata into the k8s resource's scan report (#5322)
03b6787 ci: check only MR's in actions/stale (#5337)
e6d5889 chore: update adopters template (#5330)
74dbd8a ci: do not trigger tests on the push event (#5313)
393bfdc fix(sbom): use PURL or Group and Name in case of Java (#5154)
76eb8a5 docs: add buildkite repository to ecosystem page (#5316)
6c74ee1 chore(deps): bump docker/setup-qemu-action from 2 to 3 (#5290)
6119878 chore(deps): bump docker/setup-buildx-action from 2 to 3 (#5292)
a346587 chore(deps): bump actions/cache from 3.3.1 to 3.3.2 (#5293)
7e613cc chore(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#5286)
f05bc4b chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.2 (#5289)
3be5e6b chore: enable go-critic (#5302)
f6cd21c chore(deps): bump actions/checkout from 3.6.0 to 4.1.0 (#5288)
f7b9751 chore(deps): bump github.com/aws/aws-sdk-go from 1.45.3 to 1.45.19 (#5287)
18d1687 close java-db client (#5273)
eb60e9f chore(deps): bump docker/login-action from 2 to 3 (#5291)
5a92055 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#5294)
46afe65 chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304)
0bf2a11 chore(deps): bump github.com/opencontainers/image-spec (#5295)
23b5fec fix(report): removes git::http from uri in sarif (#5244)
4f1d576 Improve the meaning of sentence (#5301)
6ab2bdf chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.2.2 (#5297)
4217cff chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#5296)
1840584 add app nil check (#5274)
c5ae9f2 typo: in secret.md (#5281)
562723f docs: add info about github format (#5265)
3dd5b1e feat(dotnet): add license support for NuGet (#5217)
5c18475 docs: correctly export variables (#5260)
0c08dde chore: Add line numbers for lint output (#5247)
0ccbb4f chore(cli): disable java-db flags in server mode (#5263)
908a491 feat(db): allow passing registry options (#5226)
5b4652d chore(deps): Bump up defsec to v0.93.0 (#5253)
faf8d49 refactor(purl): use TypeApk from purl (#5232)
559c0f3 chore: enable more linters (#5228)
2baad46 ci: bump GoReleaser from 1.16.2 to 1.20.0 (#5236)
df2bff9 Fix typo on ide.md (#5239)
44656f2 refactor: use defined types (#5225)
37af529 fix(purl): skip local Go packages (#5190)
eea3320 docs: update info about license scanning in Yarn projects (#5207)
2e66620 ci: auto apply labels (#5200)
49680dc fix link (#5203)