Trivy

New Features

Support JUnit XML (#541)

You can see the result on the dashboard if your CI service supports JUnit XML. This is an example of CircleCI.

Azure DevOps (Thank you, @lgulliver)

This is implemented by @rahul2393.

Include CVSS score info in a result (#530)

      {
        "VulnerabilityID": "CVE-2019-1547",
        "PkgName": "openssl",
        "InstalledVersion": "1.1.1c-r0",
        "FixedVersion": "1.1.1d-r0",
        "CVSS": {
          "nvd": {
            "V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "V2Score": 1.9,
            "V3Score": 4.7
          },
          "redhat": {
            "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "V3Score": 5.5
          }
        },
        ...
      }

Bug fixes

• fix(writer): Error retrieving template from path when --format is not template but template is provided (#556)
• fix(log): write error messages to stderr (#538)
• fix(alpine): replace go-deb-version with go-apk-version (#520)
• fix: MissingBlobs is implemented different in FS and S3 the method log… (#522)

Changelog

d9fa353 Fixing Error retrieving template from path when --format is not template but template is provided (#556) 9a1d746 Adding contrib/junit.tpl to docker image (#554) d18d17b db: Update trivy-db to include CVSS score info (#530) 4b57c0d docs: fix markdown (#553) ccd9b2d Added function to escape string in failure message title and descriptions (#551) ec770cd Added JUNIT support (#541) b7ec633 chore(docs): mention air-gapped environment (#544) 7aabff1 chore(README): add programming languages (#543) 9dc1bdf fix(log): write error messages to stderr (#538) 2ac672a Use StoreMetadata from trivy-db (#509) 11ae6b2 docs: add more CI options to README (#535) f201f59 chore(Dockerfile): bump up alpine to 3.12 (#528) 25d45e1 fix(alpine): replace go-deb-version with go-apk-version (#520) 298ba99 fix: MissingBlobs is implemented different in FS and S3 the method log… (#522)

Docker images

• docker pull docker.io/aquasec/trivy:0.9.2
• docker pull docker.io/aquasec/trivy:latest