simar7

feat(code-scanning): Update Trivy starter workflows

1

## Description This PR updates the Trivy workflows to the latest recommended workflow examples. Also deprecates the `tfsec` workflow as we've integrated its functionality into Trivy. Signed-off-by: Simar ## Pre-requisites...

docs(misconf): simplify misconfiguration docs

3

## Description 1. Makes the quick start page simpler by eliminating advanced info. 2. Documents correctly all the advanced options on a single page for ease of use. ## Related...

refactor(misconf): Remove ID and LongID for misconfiguration scanning

9

## Description In order to reduce complexity we will be keeping two kinds of IDs going forwards: 1. avd_id 2. short_code ## Related PRs - https://github.com/aquasecurity/trivy-checks/pull/430 ## Related Discussions -...

## Description ## Related issues - Close https://github.com/aquasecurity/trivy/issues/8944 ## Checklist - [ ] I've read the [guidelines for contributing](https://trivy.dev/latest/community/contribute/pr/) to this repository. - [ ] I've followed the [conventions](https://trivy.dev/latest/community/contribute/pr/#title) in...

There are a couple of places where some information is duplicated. 1. https://github.com/aquasecurity/trivy/blob/641946290d5458e24c01d18c7b03ff4025a6bfb6/docs/docs/scanner/misconfiguration/config/config.md 2. https://github.com/aquasecurity/trivy/blob/641946290d5458e24c01d18c7b03ff4025a6bfb6/docs/docs/scanner/misconfiguration/index.md We can de-duplicate these.

We can reduce some noise in the logs when working on the dev version for Trivy ```bash 2025-05-29T15:28:53Z  WARN  [rego] Failed to parse Trivy version - cannot confirm if module...

BREAKING: Deprecate `avd_id` and `short_code` for misconfiguration checks

2

## Description In order to reduce complexity we will be keeping two kinds of IDs going forwards: 1. `id`: machine readable ID 2. `long_id`: human readable ID As a result...

bug(k8s): "trivy k8s --report all --compliance k8s-cis-1.23 --format table" doesn't show the output

4

### Discussed in https://github.com/aquasecurity/trivy/discussions/9365 Originally posted by **fjvela** August 21, 2025 ### Description The command `trivy k8s --report all --compliance k8s-cis-1.23 --format table` doesn't show the output If you use...

Should we rethink the `.AsStringValueOrDefault()` approach? The reason I say it is because if it's not set the default will be the empty value `""`. Would using a "known" placeholder...

refactor(misconf): Use `id` and `long_id` for misconfig checks

10

## Description Use `id` and `long_id` for misconfig checks ## Related PRs - https://github.com/aquasecurity/trivy-checks/pull/430 ## Related Discussions - https://github.com/aquasecurity/trivy/discussions/8969 ## Checklist - [x] I've read the [guidelines for contributing](https://trivy.dev/latest/community/contribute/pr/) to...