murdoc/opencode-sandbox
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 11 Packages 1 Wiki Activity Actions

chore(docker): update aquasec/trivy docker tag to v0.71.1 #137

Merged
murdoc merged 1 commit from renovate-aquasec-trivy-0-x into main 2026-06-18 11:16:28 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
murdoc commented 2026-06-18 11:16:26 +00:00
Owner
Copy link

This PR contains the following updates:

Package Type Update Change OpenSSF
aquasec/trivy (source) container patch 0.71.0 → 0.71.1 OpenSSF Scorecard

Release Notes

aquasecurity/trivy (aquasec/trivy)

v0.71.1

Compare Source

Changelog

  • 164b383 release: v0.71.1 [release/v0.71] (#​10818)
  • a72d9a4 fix(oci): validate artifact filename
  • 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#​10825)
  • a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#​10821)
  • 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#​10812)
  • ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#​10815)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "after 3am and before 6pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | container | patch | `0.71.0` → `0.71.1` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/aquasecurity/trivy/badge)](https://securityscorecards.dev/viewer/?uri=github.com/aquasecurity/trivy) | --- ### Release Notes <details> <summary>aquasecurity/trivy (aquasec/trivy)</summary> ### [`v0.71.1`](https://github.com/aquasecurity/trivy/releases/tag/v0.71.1) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.71.0...v0.71.1) #### Changelog - [`164b383`](https://github.com/aquasecurity/trivy/commit/164b383121351c2d49c5d354c2245719d972752b) release: v0.71.1 \[release/v0.71] ([#&#8203;10818](https://github.com/aquasecurity/trivy/issues/10818)) - [`a72d9a4`](https://github.com/aquasecurity/trivy/commit/a72d9a4d997c25fbb6534e231b4e206c9b202b31) fix(oci): validate artifact filename - [`3dd9847`](https://github.com/aquasecurity/trivy/commit/3dd98471dfbbc4a95edd5cd866468d3a8c87fd17) fix: forward ospkg detector options through ospkg.NewScanner \[backport: release/v0.71] ([#&#8203;10825](https://github.com/aquasecurity/trivy/issues/10825)) - [`a62cbe4`](https://github.com/aquasecurity/trivy/commit/a62cbe40a240d3a3f568401b8a5f86e14114e371) fix(vex): load VEX documents from within the repository directory \[backport: release/v0.71] ([#&#8203;10821](https://github.com/aquasecurity/trivy/issues/10821)) - [`43d1d26`](https://github.com/aquasecurity/trivy/commit/43d1d2628725e913db110b89419f0bebd36f58a8) fix: surface the original analysis error instead of context cancellation \[backport: release/v0.71] ([#&#8203;10812](https://github.com/aquasecurity/trivy/issues/10812)) - [`ac7696c`](https://github.com/aquasecurity/trivy/commit/ac7696c7b50d633183ce2ff44898d4b5c6eae565) ci: expect GitHub App bot as backport PR author \[backport: release/v0.71] ([#&#8203;10815](https://github.com/aquasecurity/trivy/issues/10815)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 3am and before 6pm" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIyNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkb2NrZXIiLCJwYXRjaCIsInJlbm92YXRlIl19-->
chore(docker): update aquasec/trivy docker tag to v0.71.1
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
Details
pre-commit-check / pre-commit (pull_request) Successful in 5s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / build_and_push_temp (pull_request) Successful in 13m36s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / trivy_scan (pull_request) Successful in 1m53s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / push_final (pull_request) Successful in 7s
Details
f5b158e046
murdoc scheduled this pull request to auto merge when all checks succeed 2026-06-18 11:16:26 +00:00
murdoc merged commit be030f48f5 into main 2026-06-18 11:16:28 +00:00
murdoc deleted branch renovate-aquasec-trivy-0-x 2026-06-18 11:16:28 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
murdoc/opencode-sandbox!137
No description provided.