aquasecurity/setup-trivy (GitHub Actions)
Advisories
1
Latest version
—
License
—
OpenSSF Scorecard
—
Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-69fq-xp46-6x23 Trivy ecosystem supply chain was briefly compromised Known exploited |
Critical EPSS 59.73% |
< 0.2.6 | 0.2.6 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor