diff --git a/bitnami/trivy/0/debian-12/Dockerfile b/bitnami/trivy/0/debian-12/Dockerfile index e9278e7bc037..1837696f79d6 100644 --- a/bitnami/trivy/0/debian-12/Dockerfile +++ b/bitnami/trivy/0/debian-12/Dockerfile @@ -17,7 +17,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \ mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \ COMPONENTS=( \ - "trivy-0.69.1-0-linux-${OS_ARCH}-debian-12" \ + "trivy-0.69.2-0-linux-${OS_ARCH}-debian-12" \ ) ; \ for COMPONENT in "${COMPONENTS[@]}"; do \ if [ ! -f "${COMPONENT}.tar.gz" ]; then \ @@ -42,11 +42,11 @@ ARG TARGETARCH ENV OS_ARCH="${TARGETARCH:-amd64}" LABEL org.opencontainers.image.base.name="scratch" \ - org.opencontainers.image.created="2026-02-05T14:01:05Z" \ + org.opencontainers.image.created="2026-03-02T10:14:55Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.title="trivy" \ org.opencontainers.image.vendor="Broadcom, Inc." \ - org.opencontainers.image.version="0.69.1" + org.opencontainers.image.version="0.69.2" COPY rootfs / COPY --from=builder /opt/bitnami/rootfs / @@ -55,7 +55,7 @@ COPY --from=builder /opt/bitnami/trivy/bin/trivy /opt/bitnami/trivy/bin/trivy COPY --from=builder /opt/bitnami/trivy/contrib /opt/bitnami/trivy/contrib COPY --from=builder /opt/bitnami/trivy/licenses /opt/bitnami/trivy/licenses -ENV APP_VERSION="0.69.1" \ +ENV APP_VERSION="0.69.2" \ BITNAMI_APP_NAME="trivy" \ IMAGE_REVISION="0" \ PATH="/opt/bitnami/trivy/bin:$PATH" diff --git a/bitnami/trivy/README.md b/bitnami/trivy/README.md index 2d05e5c7e795..c1267704cbc1 100644 --- a/bitnami/trivy/README.md +++ b/bitnami/trivy/README.md @@ -1,19 +1,17 @@ # Bitnami Secure Image for Trivy -## What is Trivy? - > Trivy is a stateless, high-performance vulnerability scanner for containers and other artifacts. It detects vulnerabilities in system packages and application dependencies. [Overview of Trivy](https://github.com/aquasecurity/trivy) Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement. -## TL;DR +## TL;DR ```console docker run --name trivy bitnami/trivy:latest ``` -## Why use Bitnami Secure Images? +## Why use Bitnami Secure Images? Those are hardened, minimal CVE images built and maintained by Bitnami. Bitnami Secure Images are based on the cloud-optimized, security-hardened enterprise [OS Photon Linux](https://vmware.github.io/photon/). Why choose BSI images? @@ -30,15 +28,11 @@ Each image comes with valuable security metadata. You can view the metadata in [ If you are looking for our previous generation of images based on Debian Linux, please see the [Bitnami Legacy registry](https://hub.docker.com/u/bitnamilegacy). -## Supported tags and respective `Dockerfile` links +## Supported tags and respective `Dockerfile` links Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-understand-rolling-tags-containers-index.html). -You can see the equivalence between the different tags by taking a look at the `tags-info.yaml` file present in the branch folder, i.e `bitnami/ASSET/BRANCH/DISTRO/tags-info.yaml`. - -Subscribe to project updates by watching the [bitnami/containers GitHub repo](https://github.com/bitnami/containers). - -## Get this image +## Get this image The recommended way to get the Bitnami trivy Docker Image is to pull the prebuilt image from the [Docker Hub Registry](https://hub.docker.com/r/bitnami/trivy). @@ -60,13 +54,15 @@ cd bitnami/APP/VERSION/OPERATING-SYSTEM docker build -t bitnami/APP:latest . ``` -## Why use a non-root container? +## Why use a non-root container? Non-root container images add an extra layer of security and are generally recommended for production environments. However, because they run as a non-root user, privileged tasks are typically off-limits. Learn more about non-root containers [in our docs](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-work-with-non-root-containers-index.html). -## Configuration +## Configuration -### Running commands +The following section describes how to run commands + +### Running commands To run Trivy commands inside this container you can use `docker run` since this container uses the `trivy` binary as entrypoint. For example to execute `trivy --version` you can follow the example below: @@ -76,25 +72,17 @@ docker run --rm --name trivy bitnami/trivy:latest --version Check the [official Trivy documentation](https://github.com/aquasecurity/trivy#usage) for a list of the available parameters. -## Notable Changes +## Notable Changes ### 0.60.0-debian-12-r2 - This image revision dramatically reduces the image given it removes the existing OS distro. Instead, it simply includes the NATS binary on top of a scratch base image. -### Starting January 16, 2024 +### Starting January 16, 2024 - The `docker-compose.yaml` file has been removed, as it was solely intended for internal testing purposes. -## Contributing - -We'd love for you to contribute to this container. You can request new features by creating an [issue](https://github.com/bitnami/containers/issues) or submitting a [pull request](https://github.com/bitnami/containers/pulls) with your contribution. - -## Issues - -If you encountered a problem running this container, you can file an [issue](https://github.com/bitnami/containers/issues/new/choose). For us to provide better support, be sure to fill the issue template. - -## License +## License Copyright © 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.