aquasecurity trivy Q-a Discussions
Pinned Discussions
Q&A Discussions
Ask the community for help
-
You must be logged in to vote Image Scans: SBOM generated by trivy does not contain license information for gobinary depedencies
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote License expressions reported inconsistently with/without parentheses in SPDX format
triage/supportIndicates an issue that is a support question. scan/licenseIssues relating to license scanning -
You must be logged in to vote run trivy
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Trivy update fails
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote fs scan ignores skip-dirs
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Trivy crash when pom file destination is unreachable
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote bug(image): image.skip-dirs not working for image scannning
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote How Trivy gets packages information?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Support for scanning CVEs in standalone .so (shared object) files
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote trivy filesystem command does not process correctly for some package-lock.json
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Trivy FS scan skips some npm dependencies present in package-lock.json (v3) and node_modules even with --include-dev-deps
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote "Noisy" scan results for FluxCD in a k8s cluster
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Is there a way to control the root component's type in a cycloneDX report?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Trivy does not detect packages from package.json
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote -
You must be logged in to vote Verifying severity of a vulnerability from trivy report
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Wrong CVSS score and miss ghsa v4 score in trivy DB - CVE-2025-55754
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote package-lock.json is ignored on scan
scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote How does Trivy handle large images with big data files?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Recalculating a vulnerability's Severity and CVSS score based on injected temporal/environmental metrics
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Struggling with Rego policy for Trivy
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote
triage/support--file-patternsflag not respected by vulnerability scannersIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning -
You must be logged in to vote Can we generate multiple format of reports on a single scan?
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote Show CVSS score in table output
triage/supportIndicates an issue that is a support question. -
You must be logged in to vote CVE not reported on older Alpine, only on newer version
triage/supportIndicates an issue that is a support question. scan/vulnerabilityIssues relating to vulnerability scanning
