chore(docker): update aquasec/trivy docker tag to v0.76.1 #238

Merged

murdoc merged 1 commit from renovate-aquasec-trivy-0-x into main

2026-10-22 15:24:57 +00:00

murdoc commented

2026-10-22 15:24:02 +00:00

Owner

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
aquasec/trivy (source)	container	patch	`0.76.0` → `0.76.1`

Release Notes

aquasecurity/trivy (aquasec/trivy)

`v0.76.1`

Compare Source

🔐 Security update: eMudhra CA incident 🛡️

Trivy v0.76.1 includes mitigations for the eMudhra intermediate CA key compromise.

Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as CVE-2026-111943.
Official container images include an updated Alpine CA trust store that rejects the affected certificate chains.

We recommend upgrading to v0.76.1 and redeploying container images to apply these updates. If you build Trivy from source, use Go 1.27.3 or later and keep your runtime CA trust store up to date.

Changelog

e713f67 release: v0.76.1 [release/v0.76] (#11445)
6647bd6 fix(deps): bump the aws group across 1 directory with 6 updates [backport: release/v0.76] (#11446)
e0964c9 fix(deps): bump the docker group with 3 updates [backport: release/v0.76] (#11443)
992c360 fix(deps): bump the common group with 3 updates [backport: release/v0.76] (#11442)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- "after 3am and before 6pm"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | container | patch | `0.76.0` → `0.76.1` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/aquasecurity/trivy/badge)](https://securityscorecards.dev/viewer/?uri=github.com/aquasecurity/trivy) | --- ### Release Notes <details> <summary>aquasecurity/trivy (aquasec/trivy)</summary> ### [`v0.76.1`](https://github.com/aquasecurity/trivy/releases/tag/v0.76.1) [Compare Source](https://github.com/aquasecurity/trivy/compare/v0.76.0...v0.76.1) #### 🔐 Security update: eMudhra CA incident 🛡️ Trivy v0.76.1 includes mitigations for the [eMudhra intermediate CA key compromise](https://blog.cloudflare.com/emudhra-certificate-compromise/). - Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as [CVE-2026-111943](https://go.dev/issue/82345). - Official container images include an updated Alpine CA trust store that rejects the affected certificate chains. We recommend upgrading to v0.76.1 and redeploying container images to apply these updates. If you build Trivy from source, use Go 1.27.3 or later and keep your runtime CA trust store up to date. #### Changelog - [`e713f67`](https://github.com/aquasecurity/trivy/commit/e713f67f7d54decdcd9b3132c9751833dcced698) release: v0.76.1 \[release/v0.76] ([#11445](https://github.com/aquasecurity/trivy/issues/11445)) - [`6647bd6`](https://github.com/aquasecurity/trivy/commit/6647bd6ec5924087956285b773b8cae10508736e) fix(deps): bump the aws group across 1 directory with 6 updates \[backport: release/v0.76] ([#11446](https://github.com/aquasecurity/trivy/issues/11446)) - [`e0964c9`](https://github.com/aquasecurity/trivy/commit/e0964c97819b1d6a45b7e0426803745f173fc550) fix(deps): bump the docker group with 3 updates \[backport: release/v0.76] ([#11443](https://github.com/aquasecurity/trivy/issues/11443)) - [`992c360`](https://github.com/aquasecurity/trivy/commit/992c360c33d9f9627bb24c1fe3f20815110c88e5) fix(deps): bump the common group with 3 updates \[backport: release/v0.76] ([#11442](https://github.com/aquasecurity/trivy/issues/11442)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 3am and before 6pm" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

murdoc added 1 commit

2026-10-22 15:24:02 +00:00