COMMITS
July 22, 2026
D
fix(vex): reject non-local VEX repository names (#10987)
DmitriyLewen committed
A
fix(vex): handle 304 status code (#10307)
Alessio Greggi committed
D
fix(vuln): don't skip packages covered by a driver's own advisory feed (#10980)
DmitriyLewen committed
A
fix(conda): avoid panic on an all-operator dependency line (#10955)
Arpit Jain committed
July 21, 2026
V
chore: add schema id (#10969)
Vessel9817 committed
D
feat(vex): native discovery of VEX documents stored as OCI artifacts (#10932)
DmitriyLewen committed
July 20, 2026
T
feat: add bounded read helpers (#10974)
Teppei Fukuda committed
July 16, 2026
J
fix(dotnet): identify deps.json root project from dependency graph (#10954)
Joseph Petersen committed
July 10, 2026
H
feat(java): read Jenkins plugin manifest licenses (#10939)
Haitao Zheng committed
July 9, 2026
D
docs: ask contributors to coordinate before starting on an issue (#10940)
DmitriyLewen committed
R
July 8, 2026
D
ci: create release branch with the App token to bypass the merge queue rule (#10931)
DmitriyLewen committed
D
chore(deps): bump the common group across 1 directory with 15 updates (#10892)
dependabot[bot] committed
July 6, 2026
L
feat(seal): detect no-prefix packages by version suffix (#10911)
Lev Pachmanov committed
July 3, 2026
D
chore(deps): bump the testcontainers group with 2 updates (#10918)
dependabot[bot] committed
D
chore(deps): bump the docker group across 1 directory with 4 updates (#10919)
dependabot[bot] committed
July 2, 2026
D
fix(java): set per-file digest for nested JARs (#10855)
DmitriyLewen committed
July 1, 2026
R
ci(helm): bump Trivy version to 0.72.0 for Trivy Helm Chart 0.24.0 (#10908)
repo-trivy-write-33ed3c[bot] committed
D
ci(helm): allow trivy team to approve Chart.yaml bumps (#10912)
DmitriyLewen committed
June 30, 2026
R
release: v0.72.0 [main] (#10782)
repo-trivy-write-33ed3c[bot] committed
N
test: close plugin manager in tests cleanup (#10904)
Nikita Pivkin committed
T
Merge commit from fork
Teppei Fukuda committed
June 29, 2026
D
feat(bottlerocket): add vulnerability matching for Bottlerocket OS (#10893)
David du Colombier committed
N
fix(misconf): support github_repository_vulnerability_alerts resource (#10680)
Nikita Pivkin committed
June 25, 2026
N
feat(java): detect JAR licenses from packaged LICENSE files (#10856)
Nikita Pivkin committed
June 24, 2026
N
fix(nodejs): parse project dependencies from multi-document pnpm-lock.yaml (#10861)
Nikita Pivkin committed
June 23, 2026
D
fix(server): propagate package repository class in client/server mode (#10874)
DmitriyLewen committed
D
chore(deps): bump github.com/containerd/containerd/v2 from 2.3.1 to 2.3.2 (#10888)
dependabot[bot] committed
June 22, 2026
T
fix(vuln): fall back to UNKNOWN severity when vulnerability details are missing (#10795)
Teppei Fukuda committed