⚡ Highlights ⚡

👉 https://github.com/aquasecurity/trivy/discussions/10907

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

Changelog

• 055a5c8 release: v0.71.2 [release/v0.71] (#10871)
• 875328a fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#10870)
• 998f7b3 chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#10867)

Changelog

• 164b383 release: v0.71.1 [release/v0.71] (#10818)
• a72d9a4 fix(oci): validate artifact filename
• 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
• a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
• 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
• ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)

⚡ Highlights ⚡

👉 https://github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

⚡ Highlights ⚡

👉 #10546

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16

Changelog

• 6fb20c8 release: v0.69.3 [release/v0.69] (#10293)
• dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)

Changelog

• cfa322e release: v0.69.2 [release/v0.69] (#10266)
• 86debce fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)
• cf3d4cd fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)
• 6dfd3b0 ci: remove apidiff workflow

Changelog

• a0047a7 feat(alpine): warn mixing versions (#2000)
• d786655 Update ASFF template (#1914)
• a02cf65 chore(deps): replace containerd/containerd version to fix CVE-2022-23648 (#1994)
• 613e38c chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
• 3b6d65b test(go): add integration tests for gomod (#1989)
• 22f5b93 fix(python): fixed panic when scan .egg archive (#1992)
• 485637c fix(go): set correct go modules type (#1990)
• 6fdb554 feat(alpine): support apk repositories (#1987)
• d9bddb9 docs: add CBL-Mariner (#1982)
• 1cf1873 docs(go): fix version (#1986)
• d77dbe8 feat(go): support go.mod in Go 1.17+ (#1985)
• 32bd1e4 ci: fix URLs in the PR template (#1972)
• 94a5a18 ci: add semantic pull requests check (#1968)
• 72d94b2 docs(issue): added docs for wrong detection issues (#1961)

Changelog

• b4a7d6a docs: move CONTRIBUTING.md to docs (#1971)
• 0127c1d refactor(table): use file name instead package path (#1966)
• a92da72 fix(sbom): add --db-repository (#1964)
• b0f3864 feat(table): add PkgPath in table result (#1960)
• 0b1d32c fix(pom): merge multiple pom imports in a good manner (#1959)

Changelog

• d4e3df8 fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
• 7e48cc1 fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
• c9efa8c fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
• 52b7154 feat(jar): allow setting Maven Central URL using environment variable (#1939)
• 21f7a41 chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
• ff2b3d1 chore(chart): remove version comments (#1933)