simar7

bug(checks): AVD-KSV-0118 false positive (pod X using the default security context, which allows root privileges)

1

### Discussed in https://github.com/aquasecurity/trivy/discussions/9326 Originally posted by **huornlmj** August 8, 2025 ### IDs AVD-KSV-0118 ### Description The following section of a K8s manifest file is throwing AVD-KSV-0118 which is a...

feat(misconf): Add "via" hierarchy to Sarif output

1

### Discussed in https://github.com/aquasecurity/trivy/discussions/9044 Originally posted by **NeilJed** June 17, 2025 ### Description We are using the Trivy config scan to check our Terraform code and output SARIF to push...

feat(misconf): add support for ARM resources declared with symbolic names

3

### Discussed in https://github.com/aquasecurity/trivy/discussions/9466 Originally posted by **bve-wd** September 10, 2025 ### Description When building a Bicep file that contains a module with ``az bicep build -f main.bicep``, then trivy...

### Discussed in https://github.com/aquasecurity/trivy/discussions/9744 Originally posted by **james-mchugh** November 3, 2025 ### IDs AVD-KSV-0050 ### Description The description of AVD-KSV-0050 appears to indicate that the mere presence of roles or...

## Description This PR refactor some parts of the initialization code of the udprelay. In addition it also adds tests for dynamic address retrieval logic. I've intentionally kept the commits...

### What are you trying to do? In order to sufficiently test [dynamic address retrieval](https://github.com/tailscale/tailscale/blob/0b563f415d8f0b4eeaa1d8dd80796696e9b54c1a/net/udprelay/server.go#L394) logic, we can refactor the existing code into smaller, manageable units that can operate independently...

perf: optimize Kubernetes client cache memory usage

3

## Description - Add isEssentialAnnotation() and isEssentialLabel() helper functions - Filter non-essential annotations and labels from cached objects - Clear resource versions and managed fields to reduce memory footprint -...

perf: optimize memory configuration for scan jobs

2

## Description - Increase memory requests from 100M to 200M for better performance - Increase memory limits from 500M to 1Gi to handle large scans ## Related discussions - https://github.com/aquasecurity/trivy-operator/discussions/2674...

perf: implement non-blocking scan job processing

1

## Description - Add timeout-based channel operations to prevent reconciliation blocking - Implement graceful degradation when channels are full - Add context cancellation support for clean shutdown - Prevent indefinite...

perf: use protobuf for k8s api

1

## Description perf: use protobuf for k8s api ## Related issues - Address https://github.com/aquasecurity/trivy-operator/issues/2541 ## Checklist - [x] I've read the [guidelines for contributing](https://github.com/aquasecurity/trivy-operator/blob/main/CONTRIBUTING.md) to this repository. - [ ]...