simar7

### Discussed in https://github.com/aquasecurity/trivy/discussions/8541 Originally posted by **Nameisjohn247** March 12, 2025 ### Description While scanning for k8s (EKS cluster) with --disable-node-collector , trivy fails with the below error ` trivy...

docs(misconf): Reorganize misconfiguration scan pages

3

## Description This PR updates the structure of the misconfiguration scanning docs. Also adds more info on schemas. ## Checklist - [ ] I've read the [guidelines for contributing](https://aquasecurity.github.io/trivy/latest/community/contribute/pr/) to...

Similar to https://github.com/aquasecurity/trivy/pull/7605 but for trivy-checks

feat(misconf): Add fallback support for trivy-checks

8

## Description Trivy will now try to reach fallback sources before giving up and using embedded checks. Note if all sources fail to fetch, embedded checks are still present and...

## Description Updates to the latest trivy-checks

bug(misconf): Handle resources where pattern evaluation can return an unknown value

3

### Discussed in https://github.com/aquasecurity/trivy/discussions/8789 Originally posted by **simar7** April 29, 2025 ### Description In the following example since we don't know the value of the nested resource under evaluation, we...

feat(checks): Add S3 checks for less permissive buckets

2

Currently AVD-AWS-0345 covers the case where unrestricted access should be avoided. In some scenarios, using `Get:*` along with `Put:*` and all `resources:*` can lead to further issues. Therefore we should...

Short code is defined here: https://github.com/aquasecurity/trivy/blob/6d84e0cc0d48ae5c490cad868bb4e5e76392241c/pkg/iac/scan/rule.go#L76-L78 ### Discussed in https://github.com/aquasecurity/trivy/discussions/8846 Originally posted by **nekketsuuu** May 8, 2025 ### Description I propose to add a long ID of a check to...

## Description Adds support to checks to allow the minimum trivy version required to be set. Signed-off-by: Simar ### Example check ```rego # title: "dummy title" # description: "some description"...

### Discussed in https://github.com/aquasecurity/trivy/discussions/8878 Originally posted by **BenedekKovacsGMSL** May 15, 2025 ### Description AVD-AWS-0097 does not report `SQS:*` as misconfiguration, even though action names are case insensitive (as per [AWS...