DmitriyLewen

Results 134 issues of DmitriyLewen

Some scanning an image return `stream error: stream ID XX; INTERNAL_ERROR; received from peer` error. This is not a stable bug. Only one of the few scans of the same...

kind/bug
target/container-image

## Description See https://github.com/aquasecurity/trivy/issues/6702#issuecomment-2122271427 ## Related issues - Close #6702 ## Related PRs - [x] #6564 - [x] #6705 ## Checklist - [x] I've read the [guidelines for contributing](https://aquasecurity.github.io/trivy/latest/community/contribute/pr/) to...

### Discussed in https://github.com/aquasecurity/trivy/discussions/6730 Originally posted by **abrwn** May 20, 2024 ### Description When running a trivy scan on a node project, the following warning is shown when a `latest`...

kind/bug

## Description Add license support for `requirement.txt` files. ``` ➜ trivy -q fs --scanners license ./pkg/fanal/analyzer/language/python/pip/testdata/happy requirements.txt (license) Total: 1 (UNKNOWN: 1, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)...

### Discussed in https://github.com/aquasecurity/trivy/discussions/6784 Originally posted by **asankov** May 27, 2024 ### Description I am playing around with the secret detector in https://github.com/aquasecurity/trivy/blob/main/pkg/fanal/secret/ and I notice that the detector is...

kind/bug
help wanted
scan/secret

### Discussed in https://github.com/aquasecurity/trivy/discussions/6786 Originally posted by **asankov** May 27, 2024 ### Description The secret detector would not detect a JWT unless there is the word "JWT" somewhere on the...

kind/bug
help wanted

## Description Dependencies with empty `runtime`, `runtimeTarget` and `native` fields in (target section)[[net-core-target](https://github.com/dotnet/sdk/blob/529132850841a6bcfce96799262ce688e3851875/documentation/specs/runtime-configuration-file.md#targets-section-depsjson)] are not needed by the runtime, and the `dotnet build` command doesn't create `*.dll` files for them....

## Description Add licenses support for `environment.yml` files. Licenses are taken from `conda-meta` directory. Path to `conda-meta` is determined from [prefix](https://conda.io/projects/conda/en/latest/user-guide/tasks/manage-environments.html) field of `environment.yml` ## Related issues - Close #5949...

## Description Trivy doesn't currently support multiple OSes. To avoid flaky packages - we need to sort found OS and select only one of them (packages for other OS should...

## Description We show line with secret (also line before and after it) in report. But there are cases when this line is very long (see #6980). In this case...

triage/support
scan/secret
target/container-image