Skip to content

(Fix): Support latest trivy version#1119

Merged
TylerJang27 merged 3 commits intomainfrom
tyler/trivy-yanked
Mar 2, 2026
Merged

(Fix): Support latest trivy version#1119
TylerJang27 merged 3 commits intomainfrom
tyler/trivy-yanked

Conversation

@TylerJang27
Copy link
Collaborator

@TylerJang27 TylerJang27 commented Mar 2, 2026

Trivy yanked almost all their releases yesterday except for v0.69.2. Change KGV from 0.67.2 to 0.69.2.

This latest version fails frequently for parallel runs when fetching rulesets and overwriting them in the shared_cachedir. This can be resolved in 3 ways:

  1. A prepare_run command that fetches the rulesets. Unfortunately we don't support template resolution atm for prepare_run
  2. Skip fetching rulesets on every invocation (this would be a fairly large breaking change)
  3. Limit to 1 concurrent runs (too slow for most cases)
  4. Use a tmpdir for the cachedir (slower and uses tmp space but the easiest path forward)

I intend to do a patch release after this.

@TylerJang27 TylerJang27 requested a review from puzzler7 March 2, 2026 19:18
@TylerJang27 TylerJang27 merged commit e167836 into main Mar 2, 2026
13 checks passed
@TylerJang27 TylerJang27 deleted the tyler/trivy-yanked branch March 2, 2026 20:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants