{ "version": "https://jsonfeed.org/version/1.1", "title": "SCA Tools Feed - Vuls", "feed_url": "https://tmyymmt.github.io/sca-tools-feed/feeds/vuls.json", "items": [ { "id": "https://github.com/future-architect/vuls/releases/tag/v0.39.3", "url": "https://github.com/future-architect/vuls/releases/tag/v0.39.3", "title": "[Vuls] v0.39.3", "content_text": "## Changelog\n* 5ce56238223d505e7f99ab70c25644c6c39b620b fix!(scanner): treat AnalyzeLibrary failures as warnings instead of errors (#2574)\n* 75fc521c2a4a53643b2bdb1addbb66d6fdc2bfc6 chore(deps): bump the all group across 1 directory with 3 updates (#2572)\n* 30ed4d422f4469e5da4c444af3d5160309df5ec1 feat(config): update GetEOL with newly released OS versions (#2570)\n* 2b360462c9f8de911ddf6916daae16d3efa96fe4 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2566)\n* 6ef6ba4078abb8bbfe1aad7ddd972db8a15d0dc8 feat!(detector): detect windows with vuls2 (#2499)\n* 259e69444d66cc695ad0ce5e76425148970ada48 fix(detector/vuls2): normalize Amazon Linux release in preConvert (#2562)\n\n", "date_published": "2026-06-09T09:13:59Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.39.3" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.39.2", "url": "https://github.com/future-architect/vuls/releases/tag/v0.39.2", "title": "[Vuls] v0.39.2", "content_text": "## Changelog\n* 48f8c7993dd0ee10273b510897e936d4553e4ae1 feat(scanner): support disablerepo option for yum/dnf (#2559)\n* da0e250aaed6030a3956f00500faef1277c310af fix(detector): sort previous JSON dirs in descending order for diff (#2555)\n* 1b9751899ea19cf6d45c76d32b7d487fabe2f83d docs(readme): remove community Slack links (#2554)\n\n", "date_published": "2026-05-20T02:36:14Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.39.2" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.39.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.39.1", "title": "[Vuls] v0.39.1", "content_text": "## Changelog\n* 140017bde3f1b484013b3ee58a909079c4533572 feat(scanner): expose Trivy dependency graph fields on Library (#2552)\n\n", "date_published": "2026-05-18T09:41:45Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.39.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.39.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.39.0", "title": "[Vuls] v0.39.0", "content_text": "## Changelog\n* 5cd03fc74ede97f9bdcc60a2bfac28000dd6794e chore(deps): bump github.com/go-git/go-git/v5 (#2549)\n* 6034b6d987fb1d755a83f496ba002d4caeb11153 feat(scanner): add pylock.toml detection (PEP 751) (#2548)\n* 0244ae1f4574bf0192d0d673ad0225ad6120388e deps(dict): bump go-cve-dictionary, go-cti, gost (#2547)\n* c5262f8870a66bb40495534989ab0db85106c5f7 chore(deps): bump github.com/aquasecurity/trivy (#2521)\n* a9079d51ccb481f6cbbddfe4b395c4742a789ee7 chore(deps): bump the all group across 1 directory with 2 updates (#2546)\n* 1f896e57bbec5c31b31b46cca8111b1795565889 chore(deps): bump the others group across 1 directory with 6 updates (#2540)\n* 230527ecfed0cca78833837d3f5c36c90572d3e5 fix(config): refresh openSUSE Leap EOL entries (add 16.0, extend 15.6) (#2543)\n* 6372c4c9f7c0ce47c1e8364324d38e65829cc308 fix(detector/library): regenerate PURL after JAR SHA1 canonicalization (#2533)\n* a9752388944a60457644b51de35f98212e3d6c43 feat(detector/vuls2): thread RedHat CVE Mitigation into VulnInfo (#2532)\n* 18abe6112ffd8fffc4de5b2a2b1103514c1cfff4 test(scanner): source lockfiles from vulsio/integration (#2531)\n* 52eff31b86e21aae68ae003a2549ee9f6be13601 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2527)\n* f235b9cb6669178e314dfe4928a630e17ee72508 chore(deps): bump the all group across 1 directory with 5 updates (#2526)\n* 0e039bb4f19190301013779eddd063b45aa80c4e chore(deps): bump the all group across 1 directory with 2 updates (#2525)\n* c08f424a866f984b608ef6e5b61686c188aa52aa chore(deps): bump the others group across 1 directory with 5 updates (#2523)\n* bb3cad08e742d0af04a361ab221703faff0e2ced feat(config/os): add ubuntu 26.04 (#2524)\n* 71ddc50023a5a414063b182084d7a140e4d82d50 chore(deps): bump the go_modules group across 1 directory with 5 updates (#2520)\n* 4c71b0ac36aff171468c598d04d2c0deac498903 feat!(detector): replace go-exploitdb with vuls2 (#2517)\n* 9991a0f98f03858e6604bad069b08cc6c2550518 feat(scanner/windows): update kb supersession (#2518)\n* b780bb33abdc27a944333caf92a78eb3ccc4ce44 feat(detector): add DataSources filter to enrich function (#2513)\n* 8383d40d006830ebb4496413321c5c58eef118b5 feat!(detector): relace go-msfdb with vuls2 (#2512)\n* 234664ce5c706d35ea0fef1b295773977e88d326 feat!(detector): replace go-kev with vuls2 (#2509)\n* afd0c4d8afed9ce4172a2724e17e7634689882ca fix(detector): enrich all detected CVEs, not only vuls2-detected ones (#2511)\n* fadbbaa5bcd23dd582520a402a06326d5ed9b7e9 feat!(detector): replace gost.FillCVEsWithRedHat with vuls2 (#2505)\n* d9876d17f2d85b841adae684cfc01ff5a79fd890 fix(detector/vuls2): skip advisory fallback for ignored vulns (#2508)\n* 5119155096dc0b1dd94e508fa7300944f53e438b refactor: remove GraphQL-based GitHub detection, add Dependency.PURL (#2502)\n* c7e346165db0d47313810dcaed483e646bf5b955 refactor(scanner/windows): detect version by build number only (#2503)\n* ff914c826ed3cae704407b1c0143a4fd83be6896 chore(deps): bump actions/setup-go in the all group across 1 directory (#2497)\n* 01e3a261c3885f4e15d5c11e2931134ecad79c7c chore(deps): bump the others group across 1 directory with 12 updates (#2498)\n* b67629ccca6317b95c31253b78f73b9d2dfe151a chore(deps): bump the go_modules group across 1 directory with 2 updates (#2495)\n* 44e160e845b83b813181794a701b0dcc4664c75d fix(contrib/trivy): dedup package names and add dup warnings (#2491)\n* 652294a056412597bab033d4b5f84a834fe18ad8 deps: remove fanal framework, call Trivy parsers directly (#2476)\n* b9ac2ff9497df15a3c16b34eefbfc86597ae78fa chore!(contrib/docker): temporarily remove fvuls docker publish (#2483)\n* 35a36c1d9c47c82d7614d383fc9c41a3868cf64f fix(subcmds/report): remove trivy's tmp directory (#2482)\n* b610fa511990128d41f099df718fea92b67a11fb deps: remove trivy/pkg/cache import, replace with local helper (#2478)\n* d2acdcdbf07b23b0cfa981e963de3f47c1caefe5 chore(deps): bump google.golang.org/grpc (#2477)\n* f9865db14e75bd3150226851b1b63782862e95a8 chore(ci): update GitHub Actions workflows (#2474)\n* 95a1e307348c4194e58801ec27dee2a33322d66a fix(ci/diet): fix shell heredoc in diet-check.yml (#2471)\n* 622a72a1809da394771e59e6be0dacf66687e54e chore(ci): add Diet PR metrics workflow (#2469)\n* 3fbd29632aaebacf37f02f4dbcd9202c16750bb0 fix(models): include CPE vulns in total, set \"unknown\" patch status (#2460)\n* 16a9088516743ef8c297bb79f3f173365faa7b14 fix(detector/vuls2): backport ubuntu fix (#2458)\n* adbc4803e62e9fe5926dbe7f81fd2c5d219c4b45 fix(reporter/sbom): add WindowsKB to SBOM output (#2454)\n* 173aacfe59d30745376332678fd824c39f66b134 feat!(detector): detect debian with vuls2 (#2448)\n\n", "date_published": "2026-05-12T02:01:31Z", "tags": [ "bugfix" ], "_tool_id": "vuls", "_version": "v0.39.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.6", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.6", "title": "[Vuls] v0.38.6", "content_text": "## What's Changed\r\n* chore(deps): update dependencies and integration by @shino in https://github.com/future-architect/vuls/pull/2443\r\n* fix(contrib/trivy): O(N²) library duplication in trivy-to-vuls ClassLangPkg handling by @Copilot in https://github.com/future-architect/vuls/pull/2450\r\n* feat(detector/vuls2): amazon linux by vuls2 by @shino in https://github.com/future-architect/vuls/pull/2441\r\n\r\n## New Contributors\r\n* @Copilot made their first contribution in https://github.com/future-architect/vuls/pull/2450\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.38.5...v0.38.6", "date_published": "2026-03-11T03:06:54Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.6" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.5", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.5", "title": "[Vuls] v0.38.5", "content_text": "## Changelog\n* b87a83a9334264c4fea9f80ffbe56e130ff671b5 fix(scanner/windows): ignore unexpected lines (#2440)\n* a1314fc34d96e851cc3c3bfa39ec47353a9a0130 feat(detector/vuls2): SUSE by vuls2 (#2284)\n\n", "date_published": "2026-03-03T09:56:51Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.5" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.4", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.4", "title": "[Vuls] v0.38.4", "content_text": "## Changelog\n* 9efad2a9e7b9ceaef0d1b6f3c41a54ba18bde714 chore(deps): downgrade github.com/package-url/packageurl-go v0.1.4 => v0.1.3 (#2438)\n\n", "date_published": "2026-03-02T07:34:40Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.4" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.3", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.3", "title": "[Vuls] v0.38.3", "content_text": "## Changelog\n* 6d9ee53e33ad01212a78199e84db04b17ea3ddbe chore(deps): bump the others group across 1 directory with 7 updates (#2434)\n* c81fc7f5fe730ef8ae3fd32a6082e43a5dbd3764 chore(deps): update trivy (#2437)\n* 43e2b65c7e3cbcdc00de0496e9e39f31f55c9d73 chore(deps): bump go.opentelemetry.io/otel/sdk (#2436)\n* 101d9374cabaa80755484e4e5c5bcad6feee180d chore(deps): bump github.com/cloudflare/circl (#2433)\n* 6f67f57b3392ae8bfe7f4c9601b9e4ba81d52c7f fix(config/os): update amazon linux 2023 EOL (#2432)\n* 115ebfc8023a1a81443ca1c3c8d947c49843849f refactor(scanner/windows): check invalid property, scanner err (#2431)\n\n", "date_published": "2026-03-02T05:06:56Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.3" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.2", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.2", "title": "[Vuls] v0.38.2", "content_text": "## Changelog\n* b8762b3b28ce3703a42213076b8ec84f41016b4d fix(scanner/windows): revert \"check invalid property, scanner err (#2419)\" (#2428)\n\n", "date_published": "2026-02-20T09:47:13Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.2" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.1", "title": "[Vuls] v0.38.1", "content_text": "## Changelog\n* e9134f3748443b4e19cc3bd6d9d257a2e4bae3dc chore(deps): bump the others group with 2 updates (#2417)\n* 64ca0ce6e81824e49af1b4acb6237eedae6fb7be fix(scanner/debian): handle missing pkgs in checkrestart, improve parse (#2426)\n* 1f3a6519caaf1869e8ec01687c1dad0f46cbb842 fix(report): sort datetime dir in descending order (#2425)\n* 5eff0076158f2fb06b73fa40cf2d322412fdabb4 chore(deps): bump filippo.io/edwards25519 (#2420)\n* 7ee28be0c19df53f5f5f68341523583cc12d0a49 fix(scanner/base): set abspath to LockfilePath (#2421)\n* 44a04b79d3a7daffb35d0307fed00412578f7c81 refactor(scanner/windows): check invalid property, scanner err (#2419)\n* 2881c793300644037989d77c9d6353fd1a3ba1ba feat(config/os): update eol (#2418)\n* 94ae89b636fb0044953e68c67791fece79257be6 chore(deps): updates `golang` from `98e6cff` to `d4c4845` (#2416)\n* 205cb6d9279ddbe360a73be64b612e75fb28215a build(deps): bump go 1.26 (#2415)\n\n", "date_published": "2026-02-20T07:38:45Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.38.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.38.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.38.0", "title": "[Vuls] v0.38.0", "content_text": "## Changelog\n* c5cdf1ceb8601c272ab16aea54edb23f07435b3c fix(trivy-to-vuls): get exact LockfilePath (#2414)\n* 7111680e8e4b75848b4bb91fb9d7649f12865169 feat(scanner/windows): add vendor field for windows package (#2412)\n* 4140e9327199831d67ec8dd18611c3ea38a1bc93 chore(deps): bump github.com/go-git/go-git/v5 (#2413)\n* 1ac6f1d98fdae232938e614808e6b806624ab13b chore(deps): bump the all group across 2 directories with 2 updates (#2401)\n* 74b2959e15db5c08ba6bc653403f26a015cdbd2c chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2410)\n* c70333f9c0d43289c4b8ca01917b899edd338191 chore(deps): bump golang.org/x/oauth2 in the others group (#2411)\n* cf4e1fe8e855e61b284a9539f30fc479115e4663 feat(trivy-to-vuls): add Dev flag to library conversion (#2408)\n* 59e3e224e45fb8ef4984f9ef5a694f390e81b9e9 fix(ci): use AdityaGarg8/remove-unwanted-software@v5 (#2409)\n* a0bc2238fb2bfd4b72c7ec771fb837890f17c083 feat(scanner) add dev flag in library (#2405)\n* 23948a05b62fa0d6298d64a50357cb35628cc651 chore(ci/test): add go mod tidy check (#2406)\n* 288ca54fd62b41ea44d4c51b1bdf761abe35ddb8 chore(deps): update dictionaries (#2404)\n* 80cb3e4aac1340d414b73d2b27c53cc22630d632 chore(deps): bump github.com/CycloneDX/cyclonedx-go in the others group (#2403)\n* ac0d54fb7733c9c61cb880eea6aaa061ab6325c3 chore(deps): bump the trivy group with 2 updates (#2402)\n* 28af6429594678d25db7294a3b4463f2be88ff88 chore(deps): bump the others group across 1 directory with 2 updates (#2399)\n* 1063df5a5815a7f0d3adc0ab72132e74f5905f60 chore(deps): bump the all group with 2 updates (#2400)\n* 6fd00ee8c606305d29b039f666665c56835b0927 chore(deps/vuls2): update vuls2 and optimize kernel package name handling (#2396)\n* e5999be626bc80f011c188c99b35bef21766530b feat(libarary) add include dev dependencies (#2394)\n* ce2855c1a55976b2dd5a189cc5580352a7e992fb chore(deps): bump the others group across 1 directory with 12 updates (#2393)\n* 266f9dbeb6ff800828aafa75f40d28f1085eaf4b chore(deps): bump the all group with 5 updates (#2383)\n* ba46dd3a12069f8b0a03441f91198e52c4b05431 chore(deps): bump the all group across 2 directories with 1 update (#2384)\n* 3a8006dd667476015c4a7c3a79c878a8f98ceb8a chore(deps/vuls2): update vuls2 (#2389)\n* d0f2d68c9bd5f0df475b62de161045662cd1918d chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2380)\n* bd4301534d2a0a2c34b3168ebbf30cdb1aa1f9b6 refactor(scanner/rpm): remove warn when output is only y/n prompt (#2390)\n* 7ed7f8d970e81d0934d56b61701d81c09b96f0c3 chore!(ci/release): update cosign to v3 (#2388)\n* 781977df753d046165aecb273ac1f11887aab172 chore(ci): update goreleaser to remove deprecated params (#2387)\n* 2caede1d211acffa7cda80bbd80f29e94e2333be feat!(detector): lower the confidence of VulnCheck (#2385)\n* fc5344c7eb2e74f503a29fe7cf084b035599f7c5 fix(model/CveContents): initialize CveContents to avoid nil map (#2379)\n* c29a32f6ca3b8c112a4b4521431878fc928854c6 chore(deps): bump go-exploitdb (#2377)\n* 3b796c81643d40fbb5392b5c0e6239cc9b3a2b8b feat(cwe): add 2023, 2024, 2025 top 25 (#2375)\n\n", "date_published": "2026-02-13T03:32:37Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.38.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.37.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.37.0", "title": "[Vuls] v0.37.0", "content_text": "## Changelog\n* a27a33971c50f2218bc5118dea6edac0ec2ee1c0 chore(deps): update dictionaries (#2373)\n* 064541c1aa0ded9110f40d1d31bea4439b7270c3 chore(deps): bump the others group with 2 updates (#2372)\n* c440fd5e6e41c6be7eb3e779924836dfa01859d6 chore(deps): bump github.com/aquasecurity/trivy from 0.67.2 to 0.68.0 in the trivy group (#2370)\n* 93df2a8541373b29a6d9ff9fafbeaa6bb00a3fbf chore(deps): bump the all group with 2 updates (#2366)\n* 3d0f9419582fcf782c05ea8a9795ec788ee4d684 chore(deps): bump the others group across 1 directory with 8 updates (#2371)\n* d8bff91dedbb7d07883c27560f747beecc6348f2 feat(detector/cve): support euvd (#2364)\n* 3f82b464e2216a229a5a792a08674e88f5c5da0d chore(deps): bump the all group across 2 directories with 2 updates (#2367)\n\n", "date_published": "2025-12-09T06:38:22Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.37.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.36.3", "url": "https://github.com/future-architect/vuls/releases/tag/v0.36.3", "title": "[Vuls] v0.36.3", "content_text": "## Changelog\n* 47c6cec13ed31499ad5916d6782d96d8cb937673 fix(scanner/redhatbase): update procPathToFQPN (#2363)\n* 340fbb2258cb6cdc320661689248b2c1db10c24a chore(deps): bump go-cve-dictionary version (#2362)\n* 1c2a238bd8a293b55c9391e55ffc60bdb317997a chore(deps): update vuls2 to json/v2 adaptation (#2359)\n* 3b1e4823c3753fb7185279ca86cf58b12905d741 fix(detector/vuls2): compare CVSSv3 (#2360)\n* 14d5c9adf7b29826b96c7fc87b85b1be0fdfa302 fix(ci/codeql): add json/v2 env var (#2358)\n* 037514abfe6784ca305715e2302b94a0765de0d4 chore(deps): bump the others group across 1 directory with 7 updates (#2357)\n* f5a29e73f31f41e69e71178611c6c50880989909 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2356)\n* 2c8a955d11c4cfb1df17d57a57d50569d4723a41 chore(deps): bump the all group with 2 updates (#2351)\n* 03fbd9cdb4f407bc3415927b831449aba600813f feat(scanner/windows): add Windows 11 25H2 (#2354)\n* e790ec5b8706bfcc9a472e23c8615bfdeacd932b fix(contrib/future-vuls): add O_TRUNC flag (#2352)\n* 9714fdb9356903da7d612ab32a90d514fbf8877c chore(deps): bump the trivy group with 2 updates (#2334)\n* 2e83bf40dd86e6f007bb217e61a068900f11c58e chore(deps): revert the revert of docker cooldown (#2317) (#2350)\n\n", "date_published": "2025-12-01T03:15:07Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.36.3" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.36.2", "url": "https://github.com/future-architect/vuls/releases/tag/v0.36.2", "title": "[Vuls] v0.36.2", "content_text": "## Changelog\n* 6efa3f0f89659c00439bc24befdd5896c7d0fd12 fix(ci/goreleaser): pin cosign version to v2.6.1 (#2346)\n\n", "date_published": "2025-11-04T10:48:47Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.36.2" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.36.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.36.1", "title": "[Vuls] [DO-NOT-USE] v0.36.1", "content_text": "[DO-NOT-USE] build failed, code tree is OK but no binaries attached.\r\n\r\n## What's Changed\r\n* fix(ci/goreleaser): pin cosign version to v2.6.1 by @shino in https://github.com/future-architect/vuls/pull/2346\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.36.0...v0.36.1", "date_published": "2025-11-04T09:49:03Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.36.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.36.1-alpha1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.36.1-alpha1", "title": "[Vuls] [DO-NOT-USE] v0.36.1-alpha1", "content_text": "[DO-NOT-USE] This is pre-release.\r\n\r\n## Changelog\r\n* 6efa3f0f89659c00439bc24befdd5896c7d0fd12 fix(ci/goreleaser): pin cosign version to v2.6.1 (#2346)\r\n\r\n", "date_published": "2025-11-04T09:04:05Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.36.1-alpha1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.36.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.36.0", "title": "[Vuls] [DO-NOT-USE] v0.36.0", "content_text": "[DO-NOT-USE] build failed, code tree is OK but no binaries attached.\r\n\r\n## What's Changed\r\n* chore(ci/lint): update golangci-lint to v2.5.0 and adjust config by @shino in https://github.com/future-architect/vuls/pull/2332\r\n* chore(ci/scorecard): pinned hash by @MaineK00n in https://github.com/future-architect/vuls/pull/2337\r\n* feat(report): Implement SBOM SPDX-JSON format reporter by @ReiPenguin in https://github.com/future-architect/vuls/pull/2339\r\n* chore(deps): bump the all group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2343\r\n* chore(deps): bump the others group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2340\r\n* fix(cmd/saas): fix future-vuls upload by @shino in https://github.com/future-architect/vuls/pull/2345\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.35.1...v0.36.0", "date_published": "2025-11-04T06:20:51Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.36.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.35.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.35.1", "title": "[Vuls] v0.35.1", "content_text": "## Changelog\n* dc268aea08ebf357723c9a066560717b85e52fd2 chore(deps): bump the others group with 6 updates (#2328)\n* 2b527a23bbe6f440ebe2bfb6d5378819af17245a fix(scanner/debian): correctly merge NeedRestartProcs (#2329)\n* 6a6f187732fc0de8e143928ae72b828a657880c7 fix(detector/vuls2): temporarily fill in the version (#2330)\n\n", "date_published": "2025-10-01T03:16:32Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.35.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.35.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.35.0", "title": "[Vuls] v0.35.0", "content_text": "## Changelog\n* 5d61693fa12d91fbe9a0d0b08b4ba51236b57e47 chore(deps): update dictionaries (#2327)\n* 2cfed37f9585caad7c5678690b060e65b45ab625 chore(config): move trivy db default value ​​to detector (#2326)\n* d4d50e0f77808d2c182421f106aae34630eb4f76 chore(deps): bump the others group across 1 directory with 7 updates (#2322)\n* a8899b8c7a847c66e44c5ea4db9c9e662ddbdb2e feat(contrib/snmp2cpe): update convert command (#2324)\n* ebfb0d58aee3b89a55f7ec7544f2e025a99c84af feat(contrib/snmp2cpe): add timeout, retry option (#2323)\n* 2c9ed63669079f5de19e57ffa7e804ef33d5b059 refactor(contrib/future-vuls): remove cidr dependency (#2321)\n* a6bee180828dd97c018767c5c16e3a168d2c699f feat!(detector): detect fedora with vuls2 (#2310)\n* c28837149e0cd263a297095058c6726bd48d825a fix(scanner): set executed command string (#2319)\n* fbbbd5fc12a96e2c0a48adb1ded37c8b867ebae4 chore(deps): bump the all group across 2 directories with 1 update (#2302)\n* bb69109d7927ee4a789d0933eadc0a243edfc8db chore(deps): bump the all group across 1 directory with 5 updates (#2294)\n* 93e4457773520cd70bc87e6d50befce4cee4e8a5 chore(deps): revert docker cooldown (#2317)\n* 1f596c9171a32e60908afd3b891f473e944e4750 chore(deps): bump the others group with 2 updates (#2314)\n* cc7b7b6d2b2dd4ea315b0f0d38c1e13f61c50b02 feat(scanner/windows): update release info (#2316)\n* d2387c77f27fd78b4791d12331e003f965fb1067 feat(detector/vuls2): save digest of the vuls2 db (#2311)\n* 3bac107f1f874354ced1e6b92400b17a30892769 chore(deps): add cooldown periods (#2315)\n\n", "date_published": "2025-09-25T06:47:46Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.35.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.34.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.34.0", "title": "[Vuls] v0.34.0", "content_text": "## What's Changed\r\n* feat(detector/exploitdb): add verified field for exploitdb by @MaineK00n in https://github.com/future-architect/vuls/pull/2298\r\n* chore(deps): bump the others group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2297\r\n* feat(detector): support vulncheck with go-cve-dictionary by @MaineK00n in https://github.com/future-architect/vuls/pull/2300\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.65.0 to 0.66.0 in the trivy group by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2304\r\n* chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in the others group across 1 directory by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2307\r\n* fix(scanner/lockfile): fix binary lockfile scan on windows by @MaineK00n in https://github.com/future-architect/vuls/pull/2306\r\n* feat(scanner/lockfile): exchange contents encoded in base64 by @MaineK00n in https://github.com/future-architect/vuls/pull/2309\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.33.4...v0.34.0", "date_published": "2025-09-06T09:06:25Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.34.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.33.4", "url": "https://github.com/future-architect/vuls/releases/tag/v0.33.4", "title": "[Vuls] v0.33.4", "content_text": "## What's Changed\r\n* fix(scanner/lockfile): remove /tmp/trivy-* directory by @MaineK00n in https://github.com/future-architect/vuls/pull/2299\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.33.3...v0.33.4", "date_published": "2025-08-27T05:27:19Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.33.4" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.33.3", "url": "https://github.com/future-architect/vuls/releases/tag/v0.33.3", "title": "[Vuls] v0.33.3", "content_text": "## Changelog\n* 30a8e70f58bba07a9fd82ef38c18a6f1a3791f51 chore(ci): use per-job permissions (#2291)\n* 1f029216fbbe90bb1ee7c6b6ee6220732cae6d45 chore(deps): bump go.etcd.io/bbolt in the others group (#2293)\n* 0f3cf3747bc03a59f87aa9481902fc9465eb01a0 feat(os): add EOL for some OSes (#2287)\n* bc10750a751656d1f5f1edb12bc5db49dcd81749 chore(deps): Force go-getter v1.7.9 to fix CVE-2025-8959 (#2292)\n* 21311447f87f5bf8e45bd309053e07bc729b8afc chore(deps): bump the others group across 1 directory with 7 updates (#2288)\n* 8f94485f4e76469c76df15828d3bcea5ae42e174 chore(deps): bump helm.sh/helm/v3 (#2285)\n* e1ddeb1c5601e8a9fdd5277b87e084ae69b9786f chore(deps): bump github.com/aquasecurity/trivy (#2286)\n* 65c6962ac7d618091700bca35a60344775679019 chore(deps): bump the all group across 2 directories with 2 updates (#2277)\n* 48e5d68ceda1ef0295511b9b6db1504b9830be74 fix(scanner/lockfile): view lockfiles according to permissions in local scan (#2290)\n* ba9281cef9380b714d65749a2aaad877fee2d7bf feat(gost/debian): support debian 13 (trixie) (#2282)\n* 72c92af986d5ab96fc8fa884a088ec08f4d16c47 fix(ci): replace with actual default branch name (#2280)\n* 96aadf20a9f7798a7e77d299afe7dc1e94bfec3b feat(detector): detect ubuntu with vuls2 (#2271)\n* 737f8a4af1a61a76a7a2c5d20f92c3e45da7d429 fix(scanner/windows): do not format arch in parseRegistry (#2269)\n* 200111e9474503f1c5fe791d36870383ab234639 chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2263)\n* 1312d7e3d6f653c47ad361a96908f450ad81ea6a chore(deps): bump the others group across 1 directory with 11 updates (#2273)\n* 3c277a4bc3bf6eca392c460d7a33ac21310cb100 chore(deps): bump the all group with 4 updates (#2255)\n* 9375d40ea3c5094c5bf234514224404fb0fd45c5 chore(deps): bump helm.sh/helm/v3 (#2265)\n* 172e444c71e77a0dc16348caf13302fdf26df653 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#2262)\n* c6be1eb7ed5373a919339404ed1aa4fe5e78fce5 chore(deps): bump the all group across 1 directory with 2 updates (#2261)\n* d5f097509b8d8c94a3f774fed763b0c0ea8ee94a fix(contrib/trivy): add some oses and cve content types (#2259)\n* 5e90ccf7283552c4b9ea6c9e7ce9e9dfdc1e7ec5 fix(ci): add contrib to dependabot's docker settings (#2260)\n\n", "date_published": "2025-08-21T01:29:16Z", "tags": [ "security" ], "_tool_id": "vuls", "_version": "v0.33.3" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.33.2", "url": "https://github.com/future-architect/vuls/releases/tag/v0.33.2", "title": "[Vuls] v0.33.2", "content_text": "## What's Changed\r\n* fix(oval): add pseudo server type in NewOVALClient by @MaineK00n in https://github.com/future-architect/vuls/pull/2254\r\n* chore(deps): bump the others group with 3 updates by @dependabot in https://github.com/future-architect/vuls/pull/2252\r\n* chore(deps): bump the vuls group across 1 directory with 7 updates by @dependabot in https://github.com/future-architect/vuls/pull/2258\r\n* chore(deps): bump the trivy group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2257\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.33.1...v0.33.2", "date_published": "2025-07-02T04:57:59Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.33.2" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.33.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.33.1", "title": "[Vuls] v0.33.1", "content_text": "## What's Changed\r\n* feat!(contrib/trivy): delete image tag from server name when scanning by trivy by @sadayuki-matsuno in https://github.com/future-architect/vuls/pull/2250\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.33.0...v0.33.1", "date_published": "2025-06-25T04:34:30Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.33.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.33.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.33.0", "title": "[Vuls] v0.33.0", "content_text": "## What's Changed\r\n* fix(cmd/discover): fix ping options for windows by @MaineK00n in https://github.com/future-architect/vuls/pull/2211\r\n* fix(scanner): scan lockfiles by @MaineK00n in https://github.com/future-architect/vuls/pull/2206\r\n* feat(ubuntu): add 25.04 plucky by @MaineK00n in https://github.com/future-architect/vuls/pull/2210\r\n* feat(detector/vuls2): should download db when the schema versions are different by @MaineK00n in https://github.com/future-architect/vuls/pull/2212\r\n* fix(detector/vuls2): get metadata after opening db by @MaineK00n in https://github.com/future-architect/vuls/pull/2214\r\n* chore(deps): bump github.com/MaineK00n/vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2215\r\n* chore(ci): update dependabot.yml to group dependencies by @shino in https://github.com/future-architect/vuls/pull/2216\r\n* chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in https://github.com/future-architect/vuls/pull/2194\r\n* chore(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.4.0 in the go_modules group across 1 directory by @dependabot in https://github.com/future-architect/vuls/pull/2200\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.61.0 to 0.62.1 in the trivy group by @dependabot in https://github.com/future-architect/vuls/pull/2221\r\n* chore(deps): update tablewriter to v1.0.7 by @shino in https://github.com/future-architect/vuls/pull/2228\r\n* refactor(scanner/redhatbase): strictly parse updatable package line by @MaineK00n in https://github.com/future-architect/vuls/pull/2218\r\n* chore(deps): bump the others group across 1 directory with 6 updates by @dependabot in https://github.com/future-architect/vuls/pull/2229\r\n* chore(deps): bump the trivy group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2224\r\n* feat(os): add rhel-10 eol by @MaineK00n in https://github.com/future-architect/vuls/pull/2230\r\n* chore(ci): add group all for docker by @MaineK00n in https://github.com/future-architect/vuls/pull/2232\r\n* fix(integration): correct the wrong submodule hash by @shino in https://github.com/future-architect/vuls/pull/2233\r\n* chore(deps): bump the others group with 3 updates by @dependabot in https://github.com/future-architect/vuls/pull/2234\r\n* fix(scanner/windows): print debug log in detect by @MaineK00n in https://github.com/future-architect/vuls/pull/2237\r\n* fix(scanner/windows): allow only cab file scan for offline scan by @MaineK00n in https://github.com/future-architect/vuls/pull/2236\r\n* feat(detector/vuls2): add ignore vulnerability pattern by @MaineK00n in https://github.com/future-architect/vuls/pull/2239\r\n* feat(reporter): add row separator for --format-list by @MaineK00n in https://github.com/future-architect/vuls/pull/2241\r\n* chore(deps): bump the all group across 1 directory with 8 updates by @dependabot in https://github.com/future-architect/vuls/pull/2227\r\n* chore(deps): bump the all group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2235\r\n* feat(server): open db before starting server by @MaineK00n in https://github.com/future-architect/vuls/pull/2244\r\n* feat(detector/cve): support paloalto and cisco by @MaineK00n in https://github.com/future-architect/vuls/pull/2240\r\n* chore(deps): bump the others group across 1 directory with 8 updates by @dependabot in https://github.com/future-architect/vuls/pull/2243\r\n* fix(detector/vuls2): filter VulnerabilityData by Root ID by @MaineK00n in https://github.com/future-architect/vuls/pull/2247\r\n* feat!(detector): detect oracle and alpine with vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2157\r\n* chore(deps): bump the others group with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2245\r\n* fix(subcmds/saas): remove timestamped directory in results-dir by @FutureHirai in https://github.com/future-architect/vuls/pull/2248\r\n* chore(deps): update dictionaries by @shino in https://github.com/future-architect/vuls/pull/2249\r\n\r\n## New Contributors\r\n* @FutureHirai made their first contribution in https://github.com/future-architect/vuls/pull/2248\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.32.0...v0.33.0", "date_published": "2025-06-24T02:56:59Z", "tags": [ "security" ], "_tool_id": "vuls", "_version": "v0.33.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.32.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.32.0", "title": "[Vuls] v0.32.0", "content_text": "## What's Changed\r\n* fix(detector/vuls2): fix cvss v3.1 vector check by @MaineK00n in https://github.com/future-architect/vuls/pull/2204\r\n* chore(deps): bump github.com/MaineK00n/vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2197\r\n* Create scorecard.yml by @kotakanbe in https://github.com/future-architect/vuls/pull/2203\r\n* fix(detector/vuls2): fix postConvert by @MaineK00n in https://github.com/future-architect/vuls/pull/2205\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.31.1...v0.32.0", "date_published": "2025-05-16T07:25:34Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.32.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.31.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.31.1", "title": "[Vuls] v0.31.1", "content_text": "## What's Changed\r\n* fix(ci/goreleaser): set id-token to none for all jobs by @MaineK00n in https://github.com/future-architect/vuls/pull/2202\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.31.0...v0.31.1", "date_published": "2025-05-08T09:10:34Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.31.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.31.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.31.0", "title": "[Vuls] v0.31.0", "content_text": "## What's Changed\r\n* chore(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.27 by @dependabot in https://github.com/future-architect/vuls/pull/2151\r\n* fix(scanner/redhatbase): fix cmd in scanUpdatablePackages by @MaineK00n in https://github.com/future-architect/vuls/pull/2156\r\n* chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in https://github.com/future-architect/vuls/pull/2152\r\n* chore(actions): Adjust GitHub Actions permissions (write for release, read-only for others) by @kotakanbe in https://github.com/future-architect/vuls/pull/2154\r\n* chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2160\r\n* fix(actions): Add security-events write permission to CodeQL results upload by @kotakanbe in https://github.com/future-architect/vuls/pull/2162\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.60.0 to 0.61.0 by @dependabot in https://github.com/future-architect/vuls/pull/2163\r\n* fix(report): Refactor SBOM generation: split functions, improve PURL logic, set OS as root by @kl-sinclair in https://github.com/future-architect/vuls/pull/2171\r\n* chore(deps): bump golangci/golangci-lint-action from 6 to 7 by @dependabot in https://github.com/future-architect/vuls/pull/2166\r\n* chore(deps): Pin GitHub Actions and Docker image, configure Dependabot by @kotakanbe in https://github.com/future-architect/vuls/pull/2159\r\n* fix(report): skip empty properties in OS package SBOM components by @kl-sinclair in https://github.com/future-architect/vuls/pull/2181\r\n* fix(report): omit empty CWE and rating fields in CycloneDX SBOM by @kl-sinclair in https://github.com/future-architect/vuls/pull/2182\r\n* feat(detector/vuls2): open with Read Only Mode by @MaineK00n in https://github.com/future-architect/vuls/pull/2180\r\n* fix(cmd/saas): add timeout option by @wadda0714 in https://github.com/future-architect/vuls/pull/2183\r\n* chore(deps): bump golang.org/x/text from 0.23.0 to 0.24.0 by @dependabot in https://github.com/future-architect/vuls/pull/2167\r\n* chore(deps): bump the aws group with 4 updates by @dependabot in https://github.com/future-architect/vuls/pull/2170\r\n* chore(deps): bump docker/setup-buildx-action from afeb29a6e0d7d6258844ecabe6eba67d13443680 to 941183f0a080fa6be59a9e3d3f4108c19a528204 by @dependabot in https://github.com/future-architect/vuls/pull/2174\r\n* chore(deps): bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 by @dependabot in https://github.com/future-architect/vuls/pull/2177\r\n* chore(deps): bump docker/build-push-action from 84ad562665bb303b549fec655d1b64f9945f3f91 to 88844b95d8cbbb41035fa9c94e5967a33b92db78 by @dependabot in https://github.com/future-architect/vuls/pull/2175\r\n* chore(deps): bump github/codeql-action from e0ea141027937784e3c10ed1679e503fcc2245bc to 45775bd8235c68ba998cffa5171334d58593da47 by @dependabot in https://github.com/future-architect/vuls/pull/2176\r\n* chore(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/future-architect/vuls/pull/2169\r\n* chore(deps): bump the go_modules group across 1 directory with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2179\r\n* feat!(detector): timeout can be set, default is no timeout by @MaineK00n in https://github.com/future-architect/vuls/pull/2185\r\n* feat(detector/vuls2): fill cvss v4.0 by @MaineK00n in https://github.com/future-architect/vuls/pull/2186\r\n* chore(deps): bump github.com/kotakanbe/go-pingscanner by @MaineK00n in https://github.com/future-architect/vuls/pull/2201\r\n* feat(ci): support signed release by @kotakanbe in https://github.com/future-architect/vuls/pull/2184\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.30.0...v0.31.0", "date_published": "2025-05-08T08:07:28Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.31.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.30.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.30.0", "title": "[Vuls] v0.30.0", "content_text": "## What's Changed\r\n* fix(models/cvecontents): a little more accurate sort by @shino in https://github.com/future-architect/vuls/pull/2122\r\n* chore(ci): review of build flags, increase of runner storage by @MaineK00n in https://github.com/future-architect/vuls/pull/2123\r\n* feat(scanner/python/uv): add python uv/poetry-v2 support along with updating trivy to 0.59.1 by @dependabot in https://github.com/future-architect/vuls/pull/2118\r\n* chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in https://github.com/future-architect/vuls/pull/2125\r\n* chore(deps): bump golang.org/x/text from 0.21.0 to 0.22.0 by @dependabot in https://github.com/future-architect/vuls/pull/2126\r\n* chore(deps): bump go.etcd.io/bbolt from 1.3.11 to 1.4.0 by @dependabot in https://github.com/future-architect/vuls/pull/2128\r\n* chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in https://github.com/future-architect/vuls/pull/2129\r\n* chore(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.27.0 by @dependabot in https://github.com/future-architect/vuls/pull/2133\r\n* chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in https://github.com/future-architect/vuls/pull/2136\r\n* chore(deps): bump github.com/gosnmp/gosnmp from 1.38.0 to 1.39.0 by @dependabot in https://github.com/future-architect/vuls/pull/2137\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.59.1 to 0.60.0 by @dependabot in https://github.com/future-architect/vuls/pull/2140\r\n* chore(deps): bump golang.org/x/text from 0.22.0 to 0.23.0 by @dependabot in https://github.com/future-architect/vuls/pull/2141\r\n* chore(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 by @dependabot in https://github.com/future-architect/vuls/pull/2143\r\n* chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 by @dependabot in https://github.com/future-architect/vuls/pull/2146\r\n* chore(deps): bump the aws group across 1 directory with 4 updates by @dependabot in https://github.com/future-architect/vuls/pull/2149\r\n* feat!(deps): bump vuls dictionary libs by @MaineK00n in https://github.com/future-architect/vuls/pull/2150\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.29.0...v0.30.0", "date_published": "2025-03-18T06:43:13Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.30.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.29.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.29.0", "title": "[Vuls] v0.29.0", "content_text": "## Changelog\n* 4e3ee6a63d348f157a9b583bfe59b79f05c9a384 feat(contrib/trivy-to-vuls): add version in LibraryFixedIns (#2121)\n* fd2f94694826d4d57751c3ce8bb0ba7be98fba20 add libraryPkg version (#2120)\n* 1638c4b7cadc85833fe03b91c8458c9c5d3df693 chore(deps): bump the aws group across 1 directory with 5 updates (#2119)\n* 80b17a398b257b2f80781426f22cdf384a8d6690 chore(deps): bump github.com/samber/lo from 1.47.0 to 1.49.1 (#2117)\n* ea6384ca40a346e4235b1713a80f28d7f15947ed chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#2115)\n* f9d176e2c21913ae9d4802bd2d3a3bbdb571a764 fix(cmd/discover): add vuls2 section to the generated config.toml (#2113)\n* c6779e414325e69d63508d766ad7ff6f6d06a55e chore(deps): bump the aws group with 5 updates (#2104)\n* 8443175b4ee328edef3fd6a08ac0d20dab0d8686 chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 (#2109)\n* ee34c849e43f11b3a54ccbd4a67e3f836f3c203b chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#2103)\n* e89fc33b5aeaa1152421ebf389e2e7c435f36d8f feat(detector): use vuls2 for RedHat, CentOS, Alma and Rocky (#2106)\n* 40e36ccfc594110c833a8bd7921118ec0ab62f33 fix(reporter/http): read response body (#2108)\n* 0ec945d0510cdebf92cdd8999f94610772689f14 fix(scanner/redhatbase): support for empty release in rpm -qa (#2101)\n* d3bf2a6f26e8e549c0732c26fdcc82725d3c6633 chore(deps): bump the aws group across 1 directory with 5 updates (#2102)\n* 98351be8baf4ac0c975604f07f0613b6ff1d0974 chore(deps): bump github.com/aquasecurity/trivy from 0.57.1 to 0.58.1 (#2100)\n\n", "date_published": "2025-02-05T04:45:58Z", "tags": [ "feature" ], "_tool_id": "vuls", "_version": "v0.29.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.28.1", "url": "https://github.com/future-architect/vuls/releases/tag/v0.28.1", "title": "[Vuls] v0.28.1", "content_text": "## What's Changed\r\n* feat(config/os): update eol by @MaineK00n in https://github.com/future-architect/vuls/pull/2085\r\n* fix(detector/gost/ubuntu): detection logic when esm etc. are mixed by @MaineK00n in https://github.com/future-architect/vuls/pull/2090\r\n* chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.1 to 0.9.2 by @dependabot in https://github.com/future-architect/vuls/pull/2089\r\n* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.70.0 to 1.71.0 in the aws group by @dependabot in https://github.com/future-architect/vuls/pull/2078\r\n* chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot in https://github.com/future-architect/vuls/pull/2080\r\n* chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 by @dependabot in https://github.com/future-architect/vuls/pull/2088\r\n* chore(deps): bump golang.org/x/text from 0.20.0 to 0.21.0 by @dependabot in https://github.com/future-architect/vuls/pull/2081\r\n* fix(scanner/redhatbase): don't return error when parse failure of source file by @shino in https://github.com/future-architect/vuls/pull/2092\r\n* fix(scanner/suse): skip table header in zypper -q lu by @MaineK00n in https://github.com/future-architect/vuls/pull/2093\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.28.0...v0.28.1", "date_published": "2024-12-18T16:56:57Z", "tags": [ "other" ], "_tool_id": "vuls", "_version": "v0.28.1" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.28.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.28.0", "title": "[Vuls] v0.28.0", "content_text": "## What's Changed\r\n* feat(contrib/snmp2cpe): add --port/-P option by @MaineK00n in https://github.com/future-architect/vuls/pull/2046\r\n* feat(scanner/windows): support Windows 11 24H2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2051\r\n* fix(gost/windows): ignore other products that do not have KBs by @MaineK00n in https://github.com/future-architect/vuls/pull/2054\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.56.1 to 0.56.2 by @dependabot in https://github.com/future-architect/vuls/pull/2049\r\n* chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2052\r\n* feat(ubuntu): add 24.10 oracular by @MaineK00n in https://github.com/future-architect/vuls/pull/2055\r\n* chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in https://github.com/future-architect/vuls/pull/2058\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.56.2 to 0.57.0 by @dependabot in https://github.com/future-architect/vuls/pull/2057\r\n* chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2060\r\n* feat(scanner/windows): add Windows Server 2025 and 2022, 23H2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2059\r\n* feat(oval/oracle): ignore fips patched version for non fips package versions by @wagde-orca in https://github.com/future-architect/vuls/pull/2047\r\n* chore(deps): bump golang.org/x/text from 0.19.0 to 0.20.0 by @dependabot in https://github.com/future-architect/vuls/pull/2061\r\n* chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 by @dependabot in https://github.com/future-architect/vuls/pull/2063\r\n* fix(scanner/debian): fill kernel version from kernel package by @MaineK00n in https://github.com/future-architect/vuls/pull/2064\r\n* feat(scanner): skip SSH configuration validation when ssh-key(scan|gen) failed by @MaineK00n in https://github.com/future-architect/vuls/pull/2065\r\n* chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.4.1 to 1.5.0 by @dependabot in https://github.com/future-architect/vuls/pull/2068\r\n* chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2069\r\n* chore(deps): bump github.com/aquasecurity/trivy from 0.57.0 to 0.57.1 by @dependabot in https://github.com/future-architect/vuls/pull/2067\r\n* refactor: remove old buildtag by @MaineK00n in https://github.com/future-architect/vuls/pull/2072\r\n* feat!(scanner/rpm): change queryformat (add sourcerpm) by @MaineK00n in https://github.com/future-architect/vuls/pull/2074\r\n* chore(deps): bump the aws group with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2073\r\n\r\n\r\n**Full Changelog**: https://github.com/future-architect/vuls/compare/v0.27.0...v0.28.0", "date_published": "2024-12-08T08:38:28Z", "tags": [ "bugfix" ], "_tool_id": "vuls", "_version": "v0.28.0" }, { "id": "https://github.com/future-architect/vuls/releases/tag/v0.27.0", "url": "https://github.com/future-architect/vuls/releases/tag/v0.27.0", "title": "[Vuls] v0.27.0", "content_text": "## Changelog\n* 087b620175a81c4e6ac23ffa7399f2c85bb14dd7 chore(deps): bump github.com/aquasecurity/trivy from 0.55.2 to 0.56.1 (#2044)\n* 7c749ea806023d1aeb3d28edbd1264351c754ebb chore(deps): bump the aws group with 5 updates (#2043)\n* 939299bef91b78345a9677c3664ed1c3b9314fe1 chore(deps): bump golang.org/x/text from 0.18.0 to 0.19.0 (#2045)\n* 3dd738d41b35b166a57059954fb140ec00df35a7 feat(detector/microsoft): set WindowsRoughMatch if KB or Version to be fixed is unknown (#2041)\n* 80e417b0e826cccd977f2ae57bf90c00ccb4fc87 refactor: use std slices, maps package (#2042)\n* d5982a25c3f569f028b88295158bfbfe742f191f chore(deps): bump dictionary versions to latest ones (#2040)\n* 0e21ce2c6c97cf8d2281fe55be122480dd880fe1 fix(detector/cpe): do not overwrite distro advisories (#2039)\n* efa290085ec01466d220225efac76deb3617e0bc chore(deps): bump the aws group with 4 updates (#2038)\n* e6c0da61324a0c04026ffd1c031436ee2be9503a fix!(alpine): use source package for detection (#2037)\n* 98cbe6ed837ce5983ddcb138f5c1577b9b7cf2bf build: update go to 1.23 (#2032)\n* 29448878a730b094c2e1804e04b3f0e70330d048 chore(deps): bump github.com/aquasecurity/trivy from 0.55.1 to 0.55.2 (#2030)\n* 1bdf139a4f3b889626a69c48cb65ad22dfe22af3 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#2029)\n* ba2796fa6d3c764284a68d39cf043f238d3bcf5a chore(deps): bump the aws group with 5 updates (#2028)\n* f00ac85780331a288e2c0f13c3f9bbf468fbc3ce chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0 to 0.9.1 (#2026)\n* 888933581ffdd21a75095464238017e9bb7c83ed chore(deps): bump github.com/open-policy-agent/opa from 0.67.1 to 0.68.0 (#2027)\n* 1a54673a6adebe72feda803774685ce97d30628c feat(oval/suse): skip comparing TDC package and non-TDC package (#2025)\n* e776be163590f5e5c5f2ae46fbe8f455494e5bdc chore(deps): bump github.com/aquasecurity/trivy from 0.54.1 to 0.55.1 (#2022)\n* ff1ac6d8fc310564589705acb34499a6668cb1df chore(deps): bump the aws group with 5 updates (#2020)\n* 47bd2f115bd2600eb1defd74b3730b00cb6c5d9b chore(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 (#2023)\n* 61359db5463692d03cc09960e28c5b64ed9a34b0 chore(deps): bump golang.org/x/text from 0.17.0 to 0.18.0 (#2021)\n* 192e017438041f77ea8cd4b9eea0f66faee89438 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#2015)\n* e049df50fa1eecdccc5348e27845b5c783ed7c76 feat!(models): add vulncheck kev (#2014)\n* dce837950529084d34c6815fa66e59a4f68fa8e4 chore(deps): bump the aws group across 1 directory with 5 updates (#2013)\n* 6d9c6c48ae293770124ef48f13837e8101753413 chore(deps): bump github.com/samber/lo from 1.46.0 to 1.47.0 (#2008)\n* 2cb2f36fab202959d5769f2b137876cd1c7744df chore(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11 (#2012)\n* 3d01ed8b00271e50c5e1ebebaf167618c5470a4f feat(models): add new cveContentType trivy:azure (#2006)\n* 5858b0a4b86d4a0bece97d92f2cd581b477d82e8 chore(deps): bump github.com/gosnmp/gosnmp from 1.37.0 to 1.38.0 (#2005)\n* 8eca96f12d0c8f2a96ca0884498c73e4e8d4e6cc chore(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#2004)\n* 6425193bda28625e8ebd23f388b68426b5ba4b6c fix(detect/oracle): handle ksplice advisories (#2003)\n* f14ca86753cb86290f89da7e23ce23b9860b8202 feat(trivy): support CVSS v4.0 (#1980)\n* b2d4eafa29aa417af6d9dacc473da8bb76840d0c chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (#2002)\n* 46758eed254ed3aa60afd28428820578abbd0fb7 chore(deps): bump github.com/aquasecurity/trivy from 0.53.0 to 0.54.1 (#2000)\n* 733fbf55f8377216cefbcb7d60a4881ec9d5c662 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#1999)\n* 369837f5426f4d3f379f2b59d564dcbe0fb206cf chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#2001)\n* c3d21ea3bddf3b6c6f05a84c3064999de00f0ce9 docs: correct ubuntu oval link (#1997)\n* 6c4af01d1bf80249daf18ba50c999d7f93235cff chore(deps): bump github.com/docker/docker (#1995)\n* f6aee5ad97f6a7933dc7ffc791d5b8bb03487aaf chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#1994)\n* 25b15e85a7187e906a8ef7953ff5d7b65ee8498b chore(deps): bump the aws group with 2 updates (#1993)\n* f31cf230ab368df433a6dd5ceb8d8c6b9678585d chore(deps): bump github.com/samber/lo from 1.44.0 to 1.46.0 (#1992)\n* ed0d1b8312b99fb4b09e49b8dfef5f7f1db3d78a chore(deps): bump github.com/emersion/go-smtp from 0.21.2 to 0.21.3 (#1991)\n* 24ae273f7eb839a66705bf5dae13d7d4593b7530 chore(deps): bump the aws group with 5 updates (#1990)\n* ab624670fb2a8e21ee67253a1c70a678cffc93bb chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#1988)\n* a00fe47e5fa0bdbe8a48d307073a2249c9a84575 chore(deps): bump the aws group with 3 updates (#1987)\n* d4f7550d66834fe847df422a5630972f710d1aa6 chore(deps): bump github.com/aquasecurity/trivy from 0.52.2 to 0.53.0 (#1984)\n* 1333f3ac948e60c2addf52162001a75abfc75909 fix(scanner/suse): skip new line in zyper -q lu (#1986)\n* ac55380bd7e72ac49b092bbbae61e2415f3eebae chore(deps): bump github.com/samber/lo from 1.39.0 to 1.44.0 (#1985)\n* 109891e917215f59e657a176a28a93c00b79c0ac chore(deps): bump goreleaser/goreleaser-action from 5 to 6 (#1981)\n* 4633c04d59002a15e7b31dcc7187bd2305e2d99b chore(deps): bump the aws group with 5 updates (#1983)\n* 5db0fdb5d820dd4da879830c45e874e45968b8fb chore(deps): bump docker/build-push-action from 5 to 6 (#1982)\n* a76302c11174ca081f656c63a000ffa746e350af feat(cve/nvd): support CVSS v4.0 (#1979)\n* d8173cdd422ec9f7dfc6a43f75e905dca151a6d9 feat(cve/mitre): support go-cve-dictionary:mitre (#1978)\n* 9beb5fc9f0b5b9ab5b0170e8346142ef883cb493 chore(deps): bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 (#1976)\n* 0b4dfa0b31710cd4b093f659bf46f7518f6736f8 chore(deps): bump the aws group with 5 updates (#1974)\n* 0a47a265536fc818750ad2ca24d8d1812b5a4d92 chore(deps): update goval-dictionary (#1973)\n\n", "date_published": "2024-10-09T02:53:40Z", "tags": [ "bugfix" ], "_tool_id": "vuls", "_version": "v0.27.0" } ] }