trivy icon indicating copy to clipboard operation
trivy copied to clipboard

feat(misconf): Add support for `Minimum Supported Version`

Open simar7 opened this issue 7 months ago • 0 comments

Description

Adds support to checks to allow the minimum trivy version required to be set.

Signed-off-by: Simar [email protected]

Example check

# title: "dummy title"
# description: "some description"
# scope: package
# schemas:
# - input: schema["input"]
# custom:
#   minimum_supported_version: "1.2.3"
package builtin.foo.ABC123
deny {
    input.evil
}

In this case a Trivy version of >=1.2.3 is required to run this check.

Related issues

  • Implements: https://github.com/aquasecurity/trivy/issues/8637

Checklist

  • [x] I've read the guidelines for contributing to this repository.
  • [x] I've followed the conventions in the PR title.
  • [x] I've added tests that prove my fix is effective or that my feature works.
  • [x] I've updated the documentation with the relevant information (if needed).
  • [ ] I've added usage information (if the PR introduces new options)
  • [ ] I've included a "before" and "after" example to the description (if the PR is a user interface change).

simar7 avatar May 16 '25 05:05 simar7