mirror of
https://github.com/bitnami/containers.git
synced 2026-10-17 16:33:55 +02:00
[bitnami/trivy] Release 0.69.2-debian-12-r0 (#91167)
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
Bitnami Bot
@@ -17,7 +17,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
|
||||
DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
|
||||
mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
|
||||
COMPONENTS=( \
|
||||
"trivy-0.69.1-0-linux-${OS_ARCH}-debian-12" \
|
||||
"trivy-0.69.2-0-linux-${OS_ARCH}-debian-12" \
|
||||
) ; \
|
||||
for COMPONENT in "${COMPONENTS[@]}"; do \
|
||||
if [ ! -f "${COMPONENT}.tar.gz" ]; then \
|
||||
@@ -42,11 +42,11 @@ ARG TARGETARCH
|
||||
ENV OS_ARCH="${TARGETARCH:-amd64}"
|
||||
|
||||
LABEL org.opencontainers.image.base.name="scratch" \
|
||||
org.opencontainers.image.created="2026-02-05T14:01:05Z" \
|
||||
org.opencontainers.image.created="2026-03-02T10:14:55Z" \
|
||||
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
|
||||
org.opencontainers.image.title="trivy" \
|
||||
org.opencontainers.image.vendor="Broadcom, Inc." \
|
||||
org.opencontainers.image.version="0.69.1"
|
||||
org.opencontainers.image.version="0.69.2"
|
||||
|
||||
COPY rootfs /
|
||||
COPY --from=builder /opt/bitnami/rootfs /
|
||||
@@ -55,7 +55,7 @@ COPY --from=builder /opt/bitnami/trivy/bin/trivy /opt/bitnami/trivy/bin/trivy
|
||||
COPY --from=builder /opt/bitnami/trivy/contrib /opt/bitnami/trivy/contrib
|
||||
COPY --from=builder /opt/bitnami/trivy/licenses /opt/bitnami/trivy/licenses
|
||||
|
||||
ENV APP_VERSION="0.69.1" \
|
||||
ENV APP_VERSION="0.69.2" \
|
||||
BITNAMI_APP_NAME="trivy" \
|
||||
IMAGE_REVISION="0" \
|
||||
PATH="/opt/bitnami/trivy/bin:$PATH"
|
||||
|
||||
+12
-24
@@ -1,19 +1,17 @@
|
||||
# Bitnami Secure Image for Trivy
|
||||
|
||||
## What is Trivy?
|
||||
|
||||
> Trivy is a stateless, high-performance vulnerability scanner for containers and other artifacts. It detects vulnerabilities in system packages and application dependencies.
|
||||
|
||||
[Overview of Trivy](https://github.com/aquasecurity/trivy)
|
||||
Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
|
||||
|
||||
## TL;DR
|
||||
## <a id="tl-dr"></a> TL;DR
|
||||
|
||||
```console
|
||||
docker run --name trivy bitnami/trivy:latest
|
||||
```
|
||||
|
||||
## Why use Bitnami Secure Images?
|
||||
## <a id="why-use-bitnami-secure-images"></a> Why use Bitnami Secure Images?
|
||||
|
||||
Those are hardened, minimal CVE images built and maintained by Bitnami. Bitnami Secure Images are based on the cloud-optimized, security-hardened enterprise [OS Photon Linux](https://vmware.github.io/photon/). Why choose BSI images?
|
||||
|
||||
@@ -30,15 +28,11 @@ Each image comes with valuable security metadata. You can view the metadata in [
|
||||
|
||||
If you are looking for our previous generation of images based on Debian Linux, please see the [Bitnami Legacy registry](https://hub.docker.com/u/bitnamilegacy).
|
||||
|
||||
## Supported tags and respective `Dockerfile` links
|
||||
## <a id="supported-tags"></a> Supported tags and respective `Dockerfile` links
|
||||
|
||||
Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-understand-rolling-tags-containers-index.html).
|
||||
|
||||
You can see the equivalence between the different tags by taking a look at the `tags-info.yaml` file present in the branch folder, i.e `bitnami/ASSET/BRANCH/DISTRO/tags-info.yaml`.
|
||||
|
||||
Subscribe to project updates by watching the [bitnami/containers GitHub repo](https://github.com/bitnami/containers).
|
||||
|
||||
## Get this image
|
||||
## <a id="get-this-image"></a> Get this image
|
||||
|
||||
The recommended way to get the Bitnami trivy Docker Image is to pull the prebuilt image from the [Docker Hub Registry](https://hub.docker.com/r/bitnami/trivy).
|
||||
|
||||
@@ -60,13 +54,15 @@ cd bitnami/APP/VERSION/OPERATING-SYSTEM
|
||||
docker build -t bitnami/APP:latest .
|
||||
```
|
||||
|
||||
## Why use a non-root container?
|
||||
## <a id="why-non-root"></a> Why use a non-root container?
|
||||
|
||||
Non-root container images add an extra layer of security and are generally recommended for production environments. However, because they run as a non-root user, privileged tasks are typically off-limits. Learn more about non-root containers [in our docs](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-work-with-non-root-containers-index.html).
|
||||
|
||||
## Configuration
|
||||
## <a id="configuration"></a> Configuration
|
||||
|
||||
### Running commands
|
||||
The following section describes how to run commands
|
||||
|
||||
### <a id="running-commands"></a> Running commands
|
||||
|
||||
To run Trivy commands inside this container you can use `docker run` since this container uses the `trivy` binary as entrypoint. For example to execute `trivy --version` you can follow the example below:
|
||||
|
||||
@@ -76,25 +72,17 @@ docker run --rm --name trivy bitnami/trivy:latest --version
|
||||
|
||||
Check the [official Trivy documentation](https://github.com/aquasecurity/trivy#usage) for a list of the available parameters.
|
||||
|
||||
## Notable Changes
|
||||
## <a id="notable-changes"></a> Notable Changes
|
||||
|
||||
### 0.60.0-debian-12-r2
|
||||
|
||||
- This image revision dramatically reduces the image given it removes the existing OS distro. Instead, it simply includes the NATS binary on top of a scratch base image.
|
||||
|
||||
### Starting January 16, 2024
|
||||
### <a id="starting-january-16-2024"></a> Starting January 16, 2024
|
||||
|
||||
- The `docker-compose.yaml` file has been removed, as it was solely intended for internal testing purposes.
|
||||
|
||||
## Contributing
|
||||
|
||||
We'd love for you to contribute to this container. You can request new features by creating an [issue](https://github.com/bitnami/containers/issues) or submitting a [pull request](https://github.com/bitnami/containers/pulls) with your contribution.
|
||||
|
||||
## Issues
|
||||
|
||||
If you encountered a problem running this container, you can file an [issue](https://github.com/bitnami/containers/issues/new/choose). For us to provide better support, be sure to fill the issue template.
|
||||
|
||||
## License
|
||||
## <a id="license"></a> License
|
||||
|
||||
Copyright © 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user