trivy-action

What's Changed

• chore: update trivy version - fixed sarif by @krol3 in https://github.com/aquasecurity/trivy-action/pull/87
• feat: Add list-all-pkgs option by @m-mizutani in https://github.com/aquasecurity/trivy-action/pull/88

New Contributors

• @krol3 made their first contribution in https://github.com/aquasecurity/trivy-action/pull/87
• @m-mizutani made their first contribution in https://github.com/aquasecurity/trivy-action/pull/88

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.2.0...0.2.1

What's Changed

• feat: Update README to include a case where upload upon failure by @simar7 in https://github.com/aquasecurity/trivy-action/pull/78
• feat: added support for rootfs command by @rahul2393 in https://github.com/aquasecurity/trivy-action/pull/84
• feat(#59) add support to skip files by @gustavomonarin in https://github.com/aquasecurity/trivy-action/pull/60
• Update to Latest Release of Trivy :) by @NickLiffen in https://github.com/aquasecurity/trivy-action/pull/82

New Contributors

• @gustavomonarin made their first contribution in https://github.com/aquasecurity/trivy-action/pull/60
• @NickLiffen made their first contribution in https://github.com/aquasecurity/trivy-action/pull/82

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.1.0...0.2.0

What's Changed

• chore: Include skip options when building SARIF report by @rahul2393 in https://github.com/aquasecurity/trivy-action/pull/79

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.0.22...0.1.0

Publish all vulnerabilities through SARIF regardless of severity level.

What's Changed

• feat: Build a full SARIF report even if under accepted severity level. by @simar7 in https://github.com/aquasecurity/trivy-action/pull/73

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.0.21...0.0.22

Bump to aquasec/trivy:0.20.2

Bump to aquasec/trivy:0.19.2

Added IaC scanning mode thanks to @bsord!

Fixes cache-dir option and adds ability to pass ignore-policy

Bump Trivy version

Update trivy version

Improved readme and pins upstream Trivy version

Adds cache and timeout options as per https://github.com/aquasecurity/trivy-action/pull/35

Add --input option

Add --skip-dirs feature flag

Adds --no-progress flag for CI environments

Fix: This release fixes the issue described in https://github.com/aquasecurity/trivy-action/issues/28

This release introduces the ability to use Trivy Github Action as a build time check for running repository based checks for your git repos. Now it's possible to run Trivy Action as a check on each PR to scan for new vulnerabilities that might get introduced. More details here: https://github.com/aquasecurity/trivy-action#using-trivy-to-scan-your-git-repo

This release includes the ability to specify templates as an output format amongst others.

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.0.7...master