🔐 Security update: eMudhra CA incident 🛡️ Trivy v0.76.1 includes mitigations for the eMudhra intermediate CA key compromise. Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as CVE-2026-111943. Official container images include an updated Alpine CA trust store that rejects the affected certificate chains. We recommend upgrading to v0.76.1 and r…
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/11409 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0760-2026-10-14
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/11333 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0750-2026-10-01
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/11096 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0740-2026-08-14
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/11033 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0730-2026-08-03
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/10907 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30
Changelog 055a5c8 release: v0.71.2 [release/v0.71] (#10871) 875328a fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#10870) 998f7b3 chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#10867)
Changelog 164b383 release: v0.71.1 [release/v0.71] (#10818) a72d9a4 fix(oci): validate artifact filename 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825) a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821) 43d1d26 fix: surface the original analysis error instead of context cancellation […
⚡ Highlights ⚡ 👉 https://github.com/aquasecurity/trivy/discussions/10767 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01
⚡ Highlights ⚡ 👉 #10546 Changelog https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16
Changelog 6fb20c8 release: v0.69.3 [release/v0.69] (#10293) dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)
Changelog cfa322e release: v0.69.2 [release/v0.69] (#10266) 86debce fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267) cf3d4cd fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264) 6dfd3b0 ci: remove apidiff workflow
release: v0.69.1 [release/v0.69] (#10145)
release: v0.69.0 [main] (#9886)
release: v0.68.2 [release/v0.68] (#9950)