Update aquasec/trivy Docker tag to v0.55.0

[renovate]

This PR contains the following updates:

Package	Update	Change
aquasec/trivy (source)	minor	0.53.0 -> 0.55.0

---

Release Notes

aquasecurity/trivy (aquasec/trivy)

v0.55.0

Compare Source

⚠ BREAKING CHANGES

• cli: delete deprecated SBOM flags (#​7266)

Features

• cli: delete deprecated SBOM flags (#​7266) (7024572)
• go: use toolchain as stdlib version for go.mod files (#​7163) (2d80769)
• java: add test scope support for pom.xml files (#​7414) (2d97700)
• misconf: Add support for using spec from on-disk bundle (#​7179) (be86126)
• misconf: ignore duplicate checks (#​7317) (9ef05fc)
• misconf: iterator argument support for dynamic blocks (#​7236) (fe92072)
• misconf: port and protocol support for EC2 networks (#​7146) (98e136e)
• misconf: scanning support for YAML and JSON (#​7311) (efdbd8f)
• misconf: support for ignore by nested attributes (#​7205) (44e4686)
• misconf: support for policy and bucket grants (#​7284) (a817fae)
• misconf: variable support for Terraform Plan (#​7228) (db2c955)
• python: use minimum version for pip packages (#​7348) (e9b43f8)
• report: export modified findings in JSON (#​7383) (7aea79d)
• sbom: set User-Agent header on requests to Rekor (#​7396) (af1d257)
• server: add internal --path-prefix flag for client/server mode (#​7321) (24a4563)
• server: Make Trivy Server Multiplexer Exported (#​7389) (4c6e8ca)
• vm: Support direct filesystem (#​7058) (45b3f34)
• vm: support the Ext2/Ext3 filesystems (#​6983) (35c60f0)
• vuln: Add --detection-priority flag for accuracy tuning (#​7288) (fd8348d)

Bug Fixes

• aws: handle ECR repositories in different regions (#​6217) (feaef96)
• flag: incorrect behavior for deprected flag --clear-cache (#​7281) (2a0e529)
• helm: explicitly define kind and apiVersion of volumeClaimTemplate element (#​7362) (da4ebfa)
• java: Return error when trying to find a remote pom to avoid segfault (#​7275) (49d5270)
• license: add license handling to JUnit template (#​7409) (f80183c)
• logger initialization before flags parsing (#​7372) (c929290)
• misconf: change default TLS values for the Azure storage account (#​7345) (aadb090)
• misconf: do not filter Terraform plan JSON by name (#​7406) (9d7264a)
• misconf: do not recreate filesystem map (#​7416) (3a5d091)
• misconf: do not register Rego libs in checks registry (#​7420) (a5aa63e)
• misconf: do not set default value for default_cache_behavior (#​7234) (f0ed5e4)
• misconf: fix infer type for null value (#​7424) (0cac3ac)
• misconf: init frameworks before updating them (#​7376) (b65b32d)
• misconf: load only submodule if it is specified in source (#​7112) (a4180bd)
• misconf: support deprecating for Go checks (#​7377) (2a6c7ab)
• misconf: use module to log when metadata retrieval fails (#​7405) (0799770)
• misconf: wrap Azure PortRange in iac types (#​7357) (c5c62d5)
• nodejs: check all importers to detect dev deps from pnpm-lock.yaml file (#​7387) (fd9ed3a)
• plugin: do not call GitHub content API for releases and tags (#​7274) (b3ee6da)
• report: escape Message field in asff.tpl template (#​7401) (dd9733e)
• safely check if the directory exists (#​7353) (05a8297)
• sbom: use NOASSERTION for licenses fields in SPDX formats (#​7403) (c96dcdd)
• secret: use .eyJ keyword for JWT secret (#​7410) (bf64003)
• secret: use only line with secret for long secret lines (#​7412) (391448a)
• terraform: add aws_region name to presets (#​7184) (bb2e26a)

Performance Improvements

• misconf: do not convert contents of a YAML file to string (#​7292) (85dadf5)
• misconf: optimize work with context (#​6968) (2b6d8d9)
• misconf: use json.Valid to check validity of JSON (#​7308) (c766831)

v0.54.1

Compare Source

Changelog

• 854c61d release: v0.54.1 [release/v0.54] (#​7282)
• 334a1c2 fix(flag): incorrect behavior for deprected flag --clear-cache [backport: release/v0.54] (#​7285)
• f61725c fix(java): Return error when trying to find a remote pom to avoid segfault [backport: release/v0.54] (#​7283)
• a7b7117 fix(plugin): do not call GitHub content API for releases and tags [backport: release/v0.54] (#​7279)

v0.54.0

Compare Source

Features

• add log.FilePath() function for logger (#​7080) (1f5f348)
• add openSUSE tumbleweed detection and scanning (#​6965) (17b5dbf)
• cli: rename --vuln-type flag to --pkg-types flag (#​7104) (7cbdb0a)
• mariner: Add support for Azure Linux (#​7186) (5cbc452)
• misconf: enabled China configuration for ACRs (#​7156) (d1ec89d)
• nodejs: add license parser to pnpm analyser (#​7036) (03ac93d)
• sbom: add image labels into SPDX and CycloneDX reports (#​7257) (4a2f492)
• sbom: add vulnerability support for SPDX formats (#​7213) (efb1f69)
• share build-in rules (#​7207) (bff317c)
• vex: retrieve VEX attestations from OCI registries (#​7249) (c2fd2e0)
• vex: VEX Repository support (#​7206) (88ba460)
• vuln: add --pkg-relationships (#​7237) (5c37361)

Bug Fixes

• Add dependencyManagement exclusions to the child exclusions (#​6969) (dc68a66)
• add missing platform and type to spec (#​7149) (c8a7abd)
• cli: error on missing config file (#​7154) (7fa5e7d)
• close file when failed to open gzip (#​7164) (2a577a7)
• dotnet: don't include non-runtime libraries into report for *.deps.json files (#​7039) (5bc662b)
• dotnet: show nuget package dir not found log only when checking nuget packages (#​7194) (d76feba)
• ignore nodes when listing permission is not allowed (#​7107) (25f8143)
• java: avoid panic if deps from pom in it dir are not found (#​7245) (4e54a7e)
• java: use go-mvn-version to remove Package duplicates (#​7088) (a7a304d)
• misconf: do not evaluate TF when a load error occurs (#​7109) (f27c236)
• nodejs: detect direct dependencies when using latest version for files yarn.lock + package.json (#​7110) (54bb8bd)
• report: hide empty table when all secrets/license/misconfigs are ignored (#​7171) (c3036de)
• secret: skip regular strings contain secret patterns (#​7182) (174b1e3)
• secret: trim excessively long lines (#​7192) (92b13be)
• secret: update length of hugging-face-access-token (#​7216) (8c87194)
• server: pass license categories to options (#​7203) (9d52018)

Performance Improvements

• debian: use bytes.Index in emptyLineSplit to cut allocation (#​7065) (acbec05)

---

Configuration

📅 Schedule: Branch creation - "after 11pm every weekday,before 7am every weekday,every weekend" in timezone Europe/Brussels, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.