Vuls

Agentless Linux server vulnerability scanner.

Overview

Features

Feature reference: Official Documentation

Release History

Source: https://github.com/future-architect/vuls/releases

v0.39.3 — 2026-06-09 feature

v0.39.3

Changelog

• 5ce56238223d505e7f99ab70c25644c6c39b620b fix!(scanner): treat AnalyzeLibrary failures as warnings instead of errors (#2574)
• 75fc521c2a4a53643b2bdb1addbb66d6fdc2bfc6 chore(deps): bump the all group across 1 directory with 3 updates (#2572)
• 30ed4d422f4469e5da4c444af3d5160309df5ec1 feat(config): update GetEOL with newly released OS versions (#2570)
• 2b360462c9f8de911ddf6916daae16d3efa96fe4 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2566)
• 6ef6ba4078abb8bbfe1aad7ddd972db8a15d0dc8 feat!(detector): detect windows with vuls2 (#2499)
• 259e69444d66cc695ad0ce5e76425148970ada48 fix(detector/vuls2): normalize Amazon Linux release in preConvert (#2562)

v0.39.2 — 2026-05-20 other

v0.39.2

Changelog

• 48f8c7993dd0ee10273b510897e936d4553e4ae1 feat(scanner): support disablerepo option for yum/dnf (#2559)
• da0e250aaed6030a3956f00500faef1277c310af fix(detector): sort previous JSON dirs in descending order for diff (#2555)
• 1b9751899ea19cf6d45c76d32b7d487fabe2f83d docs(readme): remove community Slack links (#2554)

v0.39.1 — 2026-05-18 other

v0.39.1

Changelog

• 140017bde3f1b484013b3ee58a909079c4533572 feat(scanner): expose Trivy dependency graph fields on Library (#2552)

v0.39.0 — 2026-05-12 bugfix

v0.39.0

Changelog

• 5cd03fc74ede97f9bdcc60a2bfac28000dd6794e chore(deps): bump github.com/go-git/go-git/v5 (#2549)
• 6034b6d987fb1d755a83f496ba002d4caeb11153 feat(scanner): add pylock.toml detection (PEP 751) (#2548)
• 0244ae1f4574bf0192d0d673ad0225ad6120388e deps(dict): bump go-cve-dictionary, go-cti, gost (#2547)
• c5262f8870a66bb40495534989ab0db85106c5f7 chore(deps): bump github.com/aquasecurity/trivy (#2521)
• a9079d51ccb481f6cbbddfe4b395c4742a789ee7 chore(deps): bump the all group across 1 directory with 2 updates (#2546)
• 1f896e57bbec5c31b31b46cca8111b1795565889 chore(deps): bump the others group across 1 directory with 6 updates (#2540)
• 230527ecfed0cca78833837d3f5c36c90572d3e5 fix(config): refresh openSUSE Leap EOL entries (add 16.0, extend 15.6) (#2543)
• 6372c4c9f7c0ce47c1e8364324d38e65829cc308 fix(detector/library): regenerate PURL after JAR SHA1 canonicalization (#2533)
• a9752388944a60457644b51de35f98212e3d6c43 feat(detector/vuls2): thread RedHat CVE Mitigation into VulnInfo (#2532)
• 18abe6112ffd8fffc4de5b2a2b1103514c1cfff4 test(scanner): source lockfiles from vulsio/integration (#2531)
• 52eff31b86e21aae68ae003a2549ee9f6be13601 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2527)
• f235b9cb6669178e314dfe4928a630e17ee72508 chore(deps): bump the all group across 1 directory with 5 updates (#2526)
• 0e039bb4f19190301013779eddd063b45aa80c4e chore(deps): bump the all group across 1 directory with 2 updates (#2525)
• c08f424a866f984b608ef6e5b61686c188aa52aa chore(deps): bump the others group across 1 directory with 5 updates (#2523)
• bb3cad08e742d0af04a361ab221703faff0e2ced feat(config/os): add ubuntu 26.04 (#2524)
• 71ddc50023a5a414063b182084d7a140e4d82d50 chore(deps): bump the go_modules group across 1 directory with 5 updates (#2520)
• 4c71b0ac36aff171468c598d04d2c0deac498903 feat!(detector): replace go-exploitdb with vuls2 (#2517)
• 9991a0f98f03858e6604bad069b08cc6c2550518 feat(scanner/windows): update kb supersession (#2518)
• b780bb33abdc27a944333caf92a78eb3ccc4ce44 feat(detector): add DataSources filter to enrich function (#2513)
• 8383d40d006830ebb4496413321c5c58eef118b5 feat!(detector): relace go-msfdb with vuls2 (#2512)
• 234664ce5c706d35ea0fef1b295773977e88d326 feat!(detector): replace go-kev with vuls2 (#2509)
• afd0c4d8afed9ce4172a2724e17e7634689882ca fix(detector): enrich all detected CVEs, not only vuls2-detected ones (#2511)
• fadbbaa5bcd23dd582520a402a06326d5ed9b7e9 feat!(detector): replace gost.FillCVEsWithRedHat with vuls2 (#2505)
• d9876d17f2d85b841adae684cfc01ff5a79fd890 fix(detector/vuls2): skip advisory fallback for ignored vulns (#2508)
• 5119155096dc0b1dd94e508fa7300944f53e438b refactor: remove GraphQL-based GitHub detection, add Dependency.PURL (#2502)
• c7e346165db0d47313810dcaed483e646bf5b955 refactor(scanner/windows): detect version by build number only (#2503)
• ff914c826ed3cae704407b1c0143a4fd83be6896 chore(deps): bump actions/setup-go in the all group across 1 directory (#2497)
• 01e3a261c3885f4e15d5c11e2931134ecad79c7c chore(deps): bump the others group across 1 directory with 12 updates (#2498)
• b67629ccca6317b95c31253b78f73b9d2dfe151a chore(deps): bump the go_modules group across 1 directory with 2 updates (#2495)
• 44e160e845b83b813181794a701b0dcc4664c75d fix(contrib/trivy): dedup package names and add dup warnings (#2491)
• 652294a056412597bab033d4b5f84a834fe18ad8 deps: remove fanal framework, call Trivy parsers directly (#2476)
• b9ac2ff9497df15a3c16b34eefbfc86597ae78fa chore!(contrib/docker): temporarily remove fvuls docker publish (#2483)
• 35a36c1d9c47c82d7614d383fc9c41a3868cf64f fix(subcmds/report): remove trivy's tmp directory (#2482)
• b610fa511990128d41f099df718fea92b67a11fb deps: remove trivy/pkg/cache import, replace with local helper (#2478)
• d2acdcdbf07b23b0cfa981e963de3f47c1caefe5 chore(deps): bump google.golang.org/grpc (#2477)
• f9865db14e75bd3150226851b1b63782862e95a8 chore(ci): update GitHub Actions workflows (#2474)
• 95a1e307348c4194e58801ec27dee2a33322d66a fix(ci/diet): fix shell heredoc in diet-check.yml (#2471)
• 622a72a1809da394771e59e6be0dacf66687e54e chore(ci): add Diet PR metrics workflow (#2469)
• 3fbd29632aaebacf37f02f4dbcd9202c16750bb0 fix(models): include CPE vulns in total, set "unknown" patch status (#2460)
• 16a9088516743ef8c297bb79f3f173365faa7b14 fix(detector/vuls2): backport ubuntu fix (#2458)
• adbc4803e62e9fe5926dbe7f81fd2c5d219c4b45 fix(reporter/sbom): add WindowsKB to SBOM output (#2454)
• 173aacfe59d30745376332678fd824c39f66b134 feat!(detector): detect debian with vuls2 (#2448)

v0.38.6 — 2026-03-11 other

v0.38.6

What's Changed

• chore(deps): update dependencies and integration by @shino in https://github.com/future-architect/vuls/pull/2443
• fix(contrib/trivy): O(N²) library duplication in trivy-to-vuls ClassLangPkg handling by @Copilot in https://github.com/future-architect/vuls/pull/2450
• feat(detector/vuls2): amazon linux by vuls2 by @shino in https://github.com/future-architect/vuls/pull/2441

New Contributors

• @Copilot made their first contribution in https://github.com/future-architect/vuls/pull/2450

Full Changelog: https://github.com/future-architect/vuls/compare/v0.38.5...v0.38.6

v0.38.5 — 2026-03-03 other

v0.38.5

Changelog

• b87a83a9334264c4fea9f80ffbe56e130ff671b5 fix(scanner/windows): ignore unexpected lines (#2440)
• a1314fc34d96e851cc3c3bfa39ec47353a9a0130 feat(detector/vuls2): SUSE by vuls2 (#2284)

v0.38.4 — 2026-03-02 other

v0.38.4

Changelog

• 9efad2a9e7b9ceaef0d1b6f3c41a54ba18bde714 chore(deps): downgrade github.com/package-url/packageurl-go v0.1.4 => v0.1.3 (#2438)

v0.38.3 — 2026-03-02 other

v0.38.3

Changelog

• 6d9ee53e33ad01212a78199e84db04b17ea3ddbe chore(deps): bump the others group across 1 directory with 7 updates (#2434)
• c81fc7f5fe730ef8ae3fd32a6082e43a5dbd3764 chore(deps): update trivy (#2437)
• 43e2b65c7e3cbcdc00de0496e9e39f31f55c9d73 chore(deps): bump go.opentelemetry.io/otel/sdk (#2436)
• 101d9374cabaa80755484e4e5c5bcad6feee180d chore(deps): bump github.com/cloudflare/circl (#2433)
• 6f67f57b3392ae8bfe7f4c9601b9e4ba81d52c7f fix(config/os): update amazon linux 2023 EOL (#2432)
• 115ebfc8023a1a81443ca1c3c8d947c49843849f refactor(scanner/windows): check invalid property, scanner err (#2431)

v0.38.2 — 2026-02-20 other

v0.38.2

Changelog

• b8762b3b28ce3703a42213076b8ec84f41016b4d fix(scanner/windows): revert "check invalid property, scanner err (#2419)" (#2428)

v0.38.1 — 2026-02-20 other

v0.38.1

Changelog

• e9134f3748443b4e19cc3bd6d9d257a2e4bae3dc chore(deps): bump the others group with 2 updates (#2417)
• 64ca0ce6e81824e49af1b4acb6237eedae6fb7be fix(scanner/debian): handle missing pkgs in checkrestart, improve parse (#2426)
• 1f3a6519caaf1869e8ec01687c1dad0f46cbb842 fix(report): sort datetime dir in descending order (#2425)
• 5eff0076158f2fb06b73fa40cf2d322412fdabb4 chore(deps): bump filippo.io/edwards25519 (#2420)
• 7ee28be0c19df53f5f5f68341523583cc12d0a49 fix(scanner/base): set abspath to LockfilePath (#2421)
• 44a04b79d3a7daffb35d0307fed00412578f7c81 refactor(scanner/windows): check invalid property, scanner err (#2419)
• 2881c793300644037989d77c9d6353fd1a3ba1ba feat(config/os): update eol (#2418)
• 94ae89b636fb0044953e68c67791fece79257be6 chore(deps): updates golang from 98e6cff to d4c4845 (#2416)
• 205cb6d9279ddbe360a73be64b612e75fb28215a build(deps): bump go 1.26 (#2415)

v0.38.0 — 2026-02-13 feature

v0.38.0

Changelog

• c5cdf1ceb8601c272ab16aea54edb23f07435b3c fix(trivy-to-vuls): get exact LockfilePath (#2414)
• 7111680e8e4b75848b4bb91fb9d7649f12865169 feat(scanner/windows): add vendor field for windows package (#2412)
• 4140e9327199831d67ec8dd18611c3ea38a1bc93 chore(deps): bump github.com/go-git/go-git/v5 (#2413)
• 1ac6f1d98fdae232938e614808e6b806624ab13b chore(deps): bump the all group across 2 directories with 2 updates (#2401)
• 74b2959e15db5c08ba6bc653403f26a015cdbd2c chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2410)
• c70333f9c0d43289c4b8ca01917b899edd338191 chore(deps): bump golang.org/x/oauth2 in the others group (#2411)
• cf4e1fe8e855e61b284a9539f30fc479115e4663 feat(trivy-to-vuls): add Dev flag to library conversion (#2408)
• 59e3e224e45fb8ef4984f9ef5a694f390e81b9e9 fix(ci): use AdityaGarg8/remove-unwanted-software@v5 (#2409)
• a0bc2238fb2bfd4b72c7ec771fb837890f17c083 feat(scanner) add dev flag in library (#2405)
• 23948a05b62fa0d6298d64a50357cb35628cc651 chore(ci/test): add go mod tidy check (#2406)
• 288ca54fd62b41ea44d4c51b1bdf761abe35ddb8 chore(deps): update dictionaries (#2404)
• 80cb3e4aac1340d414b73d2b27c53cc22630d632 chore(deps): bump github.com/CycloneDX/cyclonedx-go in the others group (#2403)
• ac0d54fb7733c9c61cb880eea6aaa061ab6325c3 chore(deps): bump the trivy group with 2 updates (#2402)
• 28af6429594678d25db7294a3b4463f2be88ff88 chore(deps): bump the others group across 1 directory with 2 updates (#2399)
• 1063df5a5815a7f0d3adc0ab72132e74f5905f60 chore(deps): bump the all group with 2 updates (#2400)
• 6fd00ee8c606305d29b039f666665c56835b0927 chore(deps/vuls2): update vuls2 and optimize kernel package name handling (#2396)
• e5999be626bc80f011c188c99b35bef21766530b feat(libarary) add include dev dependencies (#2394)
• ce2855c1a55976b2dd5a189cc5580352a7e992fb chore(deps): bump the others group across 1 directory with 12 updates (#2393)
• 266f9dbeb6ff800828aafa75f40d28f1085eaf4b chore(deps): bump the all group with 5 updates (#2383)
• ba46dd3a12069f8b0a03441f91198e52c4b05431 chore(deps): bump the all group across 2 directories with 1 update (#2384)
• 3a8006dd667476015c4a7c3a79c878a8f98ceb8a chore(deps/vuls2): update vuls2 (#2389)
• d0f2d68c9bd5f0df475b62de161045662cd1918d chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2380)
• bd4301534d2a0a2c34b3168ebbf30cdb1aa1f9b6 refactor(scanner/rpm): remove warn when output is only y/n prompt (#2390)
• 7ed7f8d970e81d0934d56b61701d81c09b96f0c3 chore!(ci/release): update cosign to v3 (#2388)
• 781977df753d046165aecb273ac1f11887aab172 chore(ci): update goreleaser to remove deprecated params (#2387)
• 2caede1d211acffa7cda80bbd80f29e94e2333be feat!(detector): lower the confidence of VulnCheck (#2385)
• fc5344c7eb2e74f503a29fe7cf084b035599f7c5 fix(model/CveContents): initialize CveContents to avoid nil map (#2379)
• c29a32f6ca3b8c112a4b4521431878fc928854c6 chore(deps): bump go-exploitdb (#2377)
• 3b796c81643d40fbb5392b5c0e6239cc9b3a2b8b feat(cwe): add 2023, 2024, 2025 top 25 (#2375)

v0.37.0 — 2025-12-09 other

v0.37.0

Changelog

• a27a33971c50f2218bc5118dea6edac0ec2ee1c0 chore(deps): update dictionaries (#2373)
• 064541c1aa0ded9110f40d1d31bea4439b7270c3 chore(deps): bump the others group with 2 updates (#2372)
• c440fd5e6e41c6be7eb3e779924836dfa01859d6 chore(deps): bump github.com/aquasecurity/trivy from 0.67.2 to 0.68.0 in the trivy group (#2370)
• 93df2a8541373b29a6d9ff9fafbeaa6bb00a3fbf chore(deps): bump the all group with 2 updates (#2366)
• 3d0f9419582fcf782c05ea8a9795ec788ee4d684 chore(deps): bump the others group across 1 directory with 8 updates (#2371)
• d8bff91dedbb7d07883c27560f747beecc6348f2 feat(detector/cve): support euvd (#2364)
• 3f82b464e2216a229a5a792a08674e88f5c5da0d chore(deps): bump the all group across 2 directories with 2 updates (#2367)

v0.36.3 — 2025-12-01 other

v0.36.3

Changelog

• 47c6cec13ed31499ad5916d6782d96d8cb937673 fix(scanner/redhatbase): update procPathToFQPN (#2363)
• 340fbb2258cb6cdc320661689248b2c1db10c24a chore(deps): bump go-cve-dictionary version (#2362)
• 1c2a238bd8a293b55c9391e55ffc60bdb317997a chore(deps): update vuls2 to json/v2 adaptation (#2359)
• 3b1e4823c3753fb7185279ca86cf58b12905d741 fix(detector/vuls2): compare CVSSv3 (#2360)
• 14d5c9adf7b29826b96c7fc87b85b1be0fdfa302 fix(ci/codeql): add json/v2 env var (#2358)
• 037514abfe6784ca305715e2302b94a0765de0d4 chore(deps): bump the others group across 1 directory with 7 updates (#2357)
• f5a29e73f31f41e69e71178611c6c50880989909 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2356)
• 2c8a955d11c4cfb1df17d57a57d50569d4723a41 chore(deps): bump the all group with 2 updates (#2351)
• 03fbd9cdb4f407bc3415927b831449aba600813f feat(scanner/windows): add Windows 11 25H2 (#2354)
• e790ec5b8706bfcc9a472e23c8615bfdeacd932b fix(contrib/future-vuls): add O_TRUNC flag (#2352)
• 9714fdb9356903da7d612ab32a90d514fbf8877c chore(deps): bump the trivy group with 2 updates (#2334)
• 2e83bf40dd86e6f007bb217e61a068900f11c58e chore(deps): revert the revert of docker cooldown (#2317) (#2350)

v0.36.2 — 2025-11-04 feature

v0.36.2

Changelog

• 6efa3f0f89659c00439bc24befdd5896c7d0fd12 fix(ci/goreleaser): pin cosign version to v2.6.1 (#2346)

v0.36.1-alpha1 — 2025-11-04 feature

[DO-NOT-USE] v0.36.1-alpha1

[DO-NOT-USE] This is pre-release.

Changelog

• 6efa3f0f89659c00439bc24befdd5896c7d0fd12 fix(ci/goreleaser): pin cosign version to v2.6.1 (#2346)

v0.36.1 — 2025-11-04 feature

[DO-NOT-USE] v0.36.1

[DO-NOT-USE] build failed, code tree is OK but no binaries attached.

What's Changed

• fix(ci/goreleaser): pin cosign version to v2.6.1 by @shino in https://github.com/future-architect/vuls/pull/2346

Full Changelog: https://github.com/future-architect/vuls/compare/v0.36.0...v0.36.1

v0.36.0 — 2025-11-04 other

[DO-NOT-USE] v0.36.0

[DO-NOT-USE] build failed, code tree is OK but no binaries attached.

What's Changed

• chore(ci/lint): update golangci-lint to v2.5.0 and adjust config by @shino in https://github.com/future-architect/vuls/pull/2332
• chore(ci/scorecard): pinned hash by @MaineK00n in https://github.com/future-architect/vuls/pull/2337
• feat(report): Implement SBOM SPDX-JSON format reporter by @ReiPenguin in https://github.com/future-architect/vuls/pull/2339
• chore(deps): bump the all group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2343
• chore(deps): bump the others group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2340
• fix(cmd/saas): fix future-vuls upload by @shino in https://github.com/future-architect/vuls/pull/2345

Full Changelog: https://github.com/future-architect/vuls/compare/v0.35.1...v0.36.0

v0.35.1 — 2025-10-01 other

v0.35.1

Changelog

• dc268aea08ebf357723c9a066560717b85e52fd2 chore(deps): bump the others group with 6 updates (#2328)
• 2b527a23bbe6f440ebe2bfb6d5378819af17245a fix(scanner/debian): correctly merge NeedRestartProcs (#2329)
• 6a6f187732fc0de8e143928ae72b828a657880c7 fix(detector/vuls2): temporarily fill in the version (#2330)

v0.35.0 — 2025-09-25 feature

v0.35.0

Changelog

• 5d61693fa12d91fbe9a0d0b08b4ba51236b57e47 chore(deps): update dictionaries (#2327)
• 2cfed37f9585caad7c5678690b060e65b45ab625 chore(config): move trivy db default value ​​to detector (#2326)
• d4d50e0f77808d2c182421f106aae34630eb4f76 chore(deps): bump the others group across 1 directory with 7 updates (#2322)
• a8899b8c7a847c66e44c5ea4db9c9e662ddbdb2e feat(contrib/snmp2cpe): update convert command (#2324)
• ebfb0d58aee3b89a55f7ec7544f2e025a99c84af feat(contrib/snmp2cpe): add timeout, retry option (#2323)
• 2c9ed63669079f5de19e57ffa7e804ef33d5b059 refactor(contrib/future-vuls): remove cidr dependency (#2321)
• a6bee180828dd97c018767c5c16e3a168d2c699f feat!(detector): detect fedora with vuls2 (#2310)
• c28837149e0cd263a297095058c6726bd48d825a fix(scanner): set executed command string (#2319)
• fbbbd5fc12a96e2c0a48adb1ded37c8b867ebae4 chore(deps): bump the all group across 2 directories with 1 update (#2302)
• bb69109d7927ee4a789d0933eadc0a243edfc8db chore(deps): bump the all group across 1 directory with 5 updates (#2294)
• 93e4457773520cd70bc87e6d50befce4cee4e8a5 chore(deps): revert docker cooldown (#2317)
• 1f596c9171a32e60908afd3b891f473e944e4750 chore(deps): bump the others group with 2 updates (#2314)
• cc7b7b6d2b2dd4ea315b0f0d38c1e13f61c50b02 feat(scanner/windows): update release info (#2316)
• d2387c77f27fd78b4791d12331e003f965fb1067 feat(detector/vuls2): save digest of the vuls2 db (#2311)
• 3bac107f1f874354ced1e6b92400b17a30892769 chore(deps): add cooldown periods (#2315)

v0.34.0 — 2025-09-06 other

v0.34.0

What's Changed

• feat(detector/exploitdb): add verified field for exploitdb by @MaineK00n in https://github.com/future-architect/vuls/pull/2298
• chore(deps): bump the others group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2297
• feat(detector): support vulncheck with go-cve-dictionary by @MaineK00n in https://github.com/future-architect/vuls/pull/2300
• chore(deps): bump github.com/aquasecurity/trivy from 0.65.0 to 0.66.0 in the trivy group by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2304
• chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in the others group across 1 directory by @dependabot[bot] in https://github.com/future-architect/vuls/pull/2307
• fix(scanner/lockfile): fix binary lockfile scan on windows by @MaineK00n in https://github.com/future-architect/vuls/pull/2306
• feat(scanner/lockfile): exchange contents encoded in base64 by @MaineK00n in https://github.com/future-architect/vuls/pull/2309

Full Changelog: https://github.com/future-architect/vuls/compare/v0.33.4...v0.34.0

v0.33.4 — 2025-08-27 other

v0.33.4

What's Changed

• fix(scanner/lockfile): remove /tmp/trivy-* directory by @MaineK00n in https://github.com/future-architect/vuls/pull/2299

Full Changelog: https://github.com/future-architect/vuls/compare/v0.33.3...v0.33.4

v0.33.3 — 2025-08-21 security

v0.33.3

Changelog

• 30a8e70f58bba07a9fd82ef38c18a6f1a3791f51 chore(ci): use per-job permissions (#2291)
• 1f029216fbbe90bb1ee7c6b6ee6220732cae6d45 chore(deps): bump go.etcd.io/bbolt in the others group (#2293)
• 0f3cf3747bc03a59f87aa9481902fc9465eb01a0 feat(os): add EOL for some OSes (#2287)
• bc10750a751656d1f5f1edb12bc5db49dcd81749 chore(deps): Force go-getter v1.7.9 to fix CVE-2025-8959 (#2292)
• 21311447f87f5bf8e45bd309053e07bc729b8afc chore(deps): bump the others group across 1 directory with 7 updates (#2288)
• 8f94485f4e76469c76df15828d3bcea5ae42e174 chore(deps): bump helm.sh/helm/v3 (#2285)
• e1ddeb1c5601e8a9fdd5277b87e084ae69b9786f chore(deps): bump github.com/aquasecurity/trivy (#2286)
• 65c6962ac7d618091700bca35a60344775679019 chore(deps): bump the all group across 2 directories with 2 updates (#2277)
• 48e5d68ceda1ef0295511b9b6db1504b9830be74 fix(scanner/lockfile): view lockfiles according to permissions in local scan (#2290)
• ba9281cef9380b714d65749a2aaad877fee2d7bf feat(gost/debian): support debian 13 (trixie) (#2282)
• 72c92af986d5ab96fc8fa884a088ec08f4d16c47 fix(ci): replace with actual default branch name (#2280)
• 96aadf20a9f7798a7e77d299afe7dc1e94bfec3b feat(detector): detect ubuntu with vuls2 (#2271)
• 737f8a4af1a61a76a7a2c5d20f92c3e45da7d429 fix(scanner/windows): do not format arch in parseRegistry (#2269)
• 200111e9474503f1c5fe791d36870383ab234639 chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2263)
• 1312d7e3d6f653c47ad361a96908f450ad81ea6a chore(deps): bump the others group across 1 directory with 11 updates (#2273)
• 3c277a4bc3bf6eca392c460d7a33ac21310cb100 chore(deps): bump the all group with 4 updates (#2255)
• 9375d40ea3c5094c5bf234514224404fb0fd45c5 chore(deps): bump helm.sh/helm/v3 (#2265)
• 172e444c71e77a0dc16348caf13302fdf26df653 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#2262)
• c6be1eb7ed5373a919339404ed1aa4fe5e78fce5 chore(deps): bump the all group across 1 directory with 2 updates (#2261)
• d5f097509b8d8c94a3f774fed763b0c0ea8ee94a fix(contrib/trivy): add some oses and cve content types (#2259)
• 5e90ccf7283552c4b9ea6c9e7ce9e9dfdc1e7ec5 fix(ci): add contrib to dependabot's docker settings (#2260)

v0.33.2 — 2025-07-02 other

v0.33.2

What's Changed

• fix(oval): add pseudo server type in NewOVALClient by @MaineK00n in https://github.com/future-architect/vuls/pull/2254
• chore(deps): bump the others group with 3 updates by @dependabot in https://github.com/future-architect/vuls/pull/2252
• chore(deps): bump the vuls group across 1 directory with 7 updates by @dependabot in https://github.com/future-architect/vuls/pull/2258
• chore(deps): bump the trivy group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2257

Full Changelog: https://github.com/future-architect/vuls/compare/v0.33.1...v0.33.2

v0.33.1 — 2025-06-25 other

v0.33.1

What's Changed

• feat!(contrib/trivy): delete image tag from server name when scanning by trivy by @sadayuki-matsuno in https://github.com/future-architect/vuls/pull/2250

Full Changelog: https://github.com/future-architect/vuls/compare/v0.33.0...v0.33.1

v0.33.0 — 2025-06-24 security

v0.33.0

What's Changed

• fix(cmd/discover): fix ping options for windows by @MaineK00n in https://github.com/future-architect/vuls/pull/2211
• fix(scanner): scan lockfiles by @MaineK00n in https://github.com/future-architect/vuls/pull/2206
• feat(ubuntu): add 25.04 plucky by @MaineK00n in https://github.com/future-architect/vuls/pull/2210
• feat(detector/vuls2): should download db when the schema versions are different by @MaineK00n in https://github.com/future-architect/vuls/pull/2212
• fix(detector/vuls2): get metadata after opening db by @MaineK00n in https://github.com/future-architect/vuls/pull/2214
• chore(deps): bump github.com/MaineK00n/vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2215
• chore(ci): update dependabot.yml to group dependencies by @shino in https://github.com/future-architect/vuls/pull/2216
• chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in https://github.com/future-architect/vuls/pull/2194
• chore(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.4.0 in the go_modules group across 1 directory by @dependabot in https://github.com/future-architect/vuls/pull/2200
• chore(deps): bump github.com/aquasecurity/trivy from 0.61.0 to 0.62.1 in the trivy group by @dependabot in https://github.com/future-architect/vuls/pull/2221
• chore(deps): update tablewriter to v1.0.7 by @shino in https://github.com/future-architect/vuls/pull/2228
• refactor(scanner/redhatbase): strictly parse updatable package line by @MaineK00n in https://github.com/future-architect/vuls/pull/2218
• chore(deps): bump the others group across 1 directory with 6 updates by @dependabot in https://github.com/future-architect/vuls/pull/2229
• chore(deps): bump the trivy group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2224
• feat(os): add rhel-10 eol by @MaineK00n in https://github.com/future-architect/vuls/pull/2230
• chore(ci): add group all for docker by @MaineK00n in https://github.com/future-architect/vuls/pull/2232
• fix(integration): correct the wrong submodule hash by @shino in https://github.com/future-architect/vuls/pull/2233
• chore(deps): bump the others group with 3 updates by @dependabot in https://github.com/future-architect/vuls/pull/2234
• fix(scanner/windows): print debug log in detect by @MaineK00n in https://github.com/future-architect/vuls/pull/2237
• fix(scanner/windows): allow only cab file scan for offline scan by @MaineK00n in https://github.com/future-architect/vuls/pull/2236
• feat(detector/vuls2): add ignore vulnerability pattern by @MaineK00n in https://github.com/future-architect/vuls/pull/2239
• feat(reporter): add row separator for --format-list by @MaineK00n in https://github.com/future-architect/vuls/pull/2241
• chore(deps): bump the all group across 1 directory with 8 updates by @dependabot in https://github.com/future-architect/vuls/pull/2227
• chore(deps): bump the all group with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2235
• feat(server): open db before starting server by @MaineK00n in https://github.com/future-architect/vuls/pull/2244
• feat(detector/cve): support paloalto and cisco by @MaineK00n in https://github.com/future-architect/vuls/pull/2240
• chore(deps): bump the others group across 1 directory with 8 updates by @dependabot in https://github.com/future-architect/vuls/pull/2243
• fix(detector/vuls2): filter VulnerabilityData by Root ID by @MaineK00n in https://github.com/future-architect/vuls/pull/2247
• feat!(detector): detect oracle and alpine with vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2157
• chore(deps): bump the others group with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2245
• fix(subcmds/saas): remove timestamped directory in results-dir by @FutureHirai in https://github.com/future-architect/vuls/pull/2248
• chore(deps): update dictionaries by @shino in https://github.com/future-architect/vuls/pull/2249

New Contributors

• @FutureHirai made their first contribution in https://github.com/future-architect/vuls/pull/2248

Full Changelog: https://github.com/future-architect/vuls/compare/v0.32.0...v0.33.0

v0.32.0 — 2025-05-16 other

v0.32.0

What's Changed

• fix(detector/vuls2): fix cvss v3.1 vector check by @MaineK00n in https://github.com/future-architect/vuls/pull/2204
• chore(deps): bump github.com/MaineK00n/vuls2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2197
• Create scorecard.yml by @kotakanbe in https://github.com/future-architect/vuls/pull/2203
• fix(detector/vuls2): fix postConvert by @MaineK00n in https://github.com/future-architect/vuls/pull/2205

Full Changelog: https://github.com/future-architect/vuls/compare/v0.31.1...v0.32.0

v0.31.1 — 2025-05-08 feature

v0.31.1

What's Changed

• fix(ci/goreleaser): set id-token to none for all jobs by @MaineK00n in https://github.com/future-architect/vuls/pull/2202

Full Changelog: https://github.com/future-architect/vuls/compare/v0.31.0...v0.31.1

v0.31.0 — 2025-05-08 feature

v0.31.0

What's Changed

• chore(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.27 by @dependabot in https://github.com/future-architect/vuls/pull/2151
• fix(scanner/redhatbase): fix cmd in scanUpdatablePackages by @MaineK00n in https://github.com/future-architect/vuls/pull/2156
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in https://github.com/future-architect/vuls/pull/2152
• chore(actions): Adjust GitHub Actions permissions (write for release, read-only for others) by @kotakanbe in https://github.com/future-architect/vuls/pull/2154
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2160
• fix(actions): Add security-events write permission to CodeQL results upload by @kotakanbe in https://github.com/future-architect/vuls/pull/2162
• chore(deps): bump github.com/aquasecurity/trivy from 0.60.0 to 0.61.0 by @dependabot in https://github.com/future-architect/vuls/pull/2163
• fix(report): Refactor SBOM generation: split functions, improve PURL logic, set OS as root by @kl-sinclair in https://github.com/future-architect/vuls/pull/2171
• chore(deps): bump golangci/golangci-lint-action from 6 to 7 by @dependabot in https://github.com/future-architect/vuls/pull/2166
• chore(deps): Pin GitHub Actions and Docker image, configure Dependabot by @kotakanbe in https://github.com/future-architect/vuls/pull/2159
• fix(report): skip empty properties in OS package SBOM components by @kl-sinclair in https://github.com/future-architect/vuls/pull/2181
• fix(report): omit empty CWE and rating fields in CycloneDX SBOM by @kl-sinclair in https://github.com/future-architect/vuls/pull/2182
• feat(detector/vuls2): open with Read Only Mode by @MaineK00n in https://github.com/future-architect/vuls/pull/2180
• fix(cmd/saas): add timeout option by @wadda0714 in https://github.com/future-architect/vuls/pull/2183
• chore(deps): bump golang.org/x/text from 0.23.0 to 0.24.0 by @dependabot in https://github.com/future-architect/vuls/pull/2167
• chore(deps): bump the aws group with 4 updates by @dependabot in https://github.com/future-architect/vuls/pull/2170
• chore(deps): bump docker/setup-buildx-action from afeb29a6e0d7d6258844ecabe6eba67d13443680 to 941183f0a080fa6be59a9e3d3f4108c19a528204 by @dependabot in https://github.com/future-architect/vuls/pull/2174
• chore(deps): bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 by @dependabot in https://github.com/future-architect/vuls/pull/2177
• chore(deps): bump docker/build-push-action from 84ad562665bb303b549fec655d1b64f9945f3f91 to 88844b95d8cbbb41035fa9c94e5967a33b92db78 by @dependabot in https://github.com/future-architect/vuls/pull/2175
• chore(deps): bump github/codeql-action from e0ea141027937784e3c10ed1679e503fcc2245bc to 45775bd8235c68ba998cffa5171334d58593da47 by @dependabot in https://github.com/future-architect/vuls/pull/2176
• chore(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/future-architect/vuls/pull/2169
• chore(deps): bump the go_modules group across 1 directory with 2 updates by @dependabot in https://github.com/future-architect/vuls/pull/2179
• feat!(detector): timeout can be set, default is no timeout by @MaineK00n in https://github.com/future-architect/vuls/pull/2185
• feat(detector/vuls2): fill cvss v4.0 by @MaineK00n in https://github.com/future-architect/vuls/pull/2186
• chore(deps): bump github.com/kotakanbe/go-pingscanner by @MaineK00n in https://github.com/future-architect/vuls/pull/2201
• feat(ci): support signed release by @kotakanbe in https://github.com/future-architect/vuls/pull/2184

Full Changelog: https://github.com/future-architect/vuls/compare/v0.30.0...v0.31.0

v0.30.0 — 2025-03-18 other

v0.30.0

What's Changed

• fix(models/cvecontents): a little more accurate sort by @shino in https://github.com/future-architect/vuls/pull/2122
• chore(ci): review of build flags, increase of runner storage by @MaineK00n in https://github.com/future-architect/vuls/pull/2123
• feat(scanner/python/uv): add python uv/poetry-v2 support along with updating trivy to 0.59.1 by @dependabot in https://github.com/future-architect/vuls/pull/2118
• chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in https://github.com/future-architect/vuls/pull/2125
• chore(deps): bump golang.org/x/text from 0.21.0 to 0.22.0 by @dependabot in https://github.com/future-architect/vuls/pull/2126
• chore(deps): bump go.etcd.io/bbolt from 1.3.11 to 1.4.0 by @dependabot in https://github.com/future-architect/vuls/pull/2128
• chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in https://github.com/future-architect/vuls/pull/2129
• chore(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.27.0 by @dependabot in https://github.com/future-architect/vuls/pull/2133
• chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in https://github.com/future-architect/vuls/pull/2136
• chore(deps): bump github.com/gosnmp/gosnmp from 1.38.0 to 1.39.0 by @dependabot in https://github.com/future-architect/vuls/pull/2137
• chore(deps): bump github.com/aquasecurity/trivy from 0.59.1 to 0.60.0 by @dependabot in https://github.com/future-architect/vuls/pull/2140
• chore(deps): bump golang.org/x/text from 0.22.0 to 0.23.0 by @dependabot in https://github.com/future-architect/vuls/pull/2141
• chore(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 by @dependabot in https://github.com/future-architect/vuls/pull/2143
• chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 by @dependabot in https://github.com/future-architect/vuls/pull/2146
• chore(deps): bump the aws group across 1 directory with 4 updates by @dependabot in https://github.com/future-architect/vuls/pull/2149
• feat!(deps): bump vuls dictionary libs by @MaineK00n in https://github.com/future-architect/vuls/pull/2150

Full Changelog: https://github.com/future-architect/vuls/compare/v0.29.0...v0.30.0

v0.29.0 — 2025-02-05 feature

v0.29.0

Changelog

• 4e3ee6a63d348f157a9b583bfe59b79f05c9a384 feat(contrib/trivy-to-vuls): add version in LibraryFixedIns (#2121)
• fd2f94694826d4d57751c3ce8bb0ba7be98fba20 add libraryPkg version (#2120)
• 1638c4b7cadc85833fe03b91c8458c9c5d3df693 chore(deps): bump the aws group across 1 directory with 5 updates (#2119)
• 80b17a398b257b2f80781426f22cdf384a8d6690 chore(deps): bump github.com/samber/lo from 1.47.0 to 1.49.1 (#2117)
• ea6384ca40a346e4235b1713a80f28d7f15947ed chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#2115)
• f9d176e2c21913ae9d4802bd2d3a3bbdb571a764 fix(cmd/discover): add vuls2 section to the generated config.toml (#2113)
• c6779e414325e69d63508d766ad7ff6f6d06a55e chore(deps): bump the aws group with 5 updates (#2104)
• 8443175b4ee328edef3fd6a08ac0d20dab0d8686 chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 (#2109)
• ee34c849e43f11b3a54ccbd4a67e3f836f3c203b chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#2103)
• e89fc33b5aeaa1152421ebf389e2e7c435f36d8f feat(detector): use vuls2 for RedHat, CentOS, Alma and Rocky (#2106)
• 40e36ccfc594110c833a8bd7921118ec0ab62f33 fix(reporter/http): read response body (#2108)
• 0ec945d0510cdebf92cdd8999f94610772689f14 fix(scanner/redhatbase): support for empty release in rpm -qa (#2101)
• d3bf2a6f26e8e549c0732c26fdcc82725d3c6633 chore(deps): bump the aws group across 1 directory with 5 updates (#2102)
• 98351be8baf4ac0c975604f07f0613b6ff1d0974 chore(deps): bump github.com/aquasecurity/trivy from 0.57.1 to 0.58.1 (#2100)

v0.28.1 — 2024-12-18 other

v0.28.1

What's Changed

• feat(config/os): update eol by @MaineK00n in https://github.com/future-architect/vuls/pull/2085
• fix(detector/gost/ubuntu): detection logic when esm etc. are mixed by @MaineK00n in https://github.com/future-architect/vuls/pull/2090
• chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.1 to 0.9.2 by @dependabot in https://github.com/future-architect/vuls/pull/2089
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.70.0 to 1.71.0 in the aws group by @dependabot in https://github.com/future-architect/vuls/pull/2078
• chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot in https://github.com/future-architect/vuls/pull/2080
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 by @dependabot in https://github.com/future-architect/vuls/pull/2088
• chore(deps): bump golang.org/x/text from 0.20.0 to 0.21.0 by @dependabot in https://github.com/future-architect/vuls/pull/2081
• fix(scanner/redhatbase): don't return error when parse failure of source file by @shino in https://github.com/future-architect/vuls/pull/2092
• fix(scanner/suse): skip table header in zypper -q lu by @MaineK00n in https://github.com/future-architect/vuls/pull/2093

Full Changelog: https://github.com/future-architect/vuls/compare/v0.28.0...v0.28.1

v0.28.0 — 2024-12-08 bugfix

v0.28.0

What's Changed

• feat(contrib/snmp2cpe): add --port/-P option by @MaineK00n in https://github.com/future-architect/vuls/pull/2046
• feat(scanner/windows): support Windows 11 24H2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2051
• fix(gost/windows): ignore other products that do not have KBs by @MaineK00n in https://github.com/future-architect/vuls/pull/2054
• chore(deps): bump github.com/aquasecurity/trivy from 0.56.1 to 0.56.2 by @dependabot in https://github.com/future-architect/vuls/pull/2049
• chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2052
• feat(ubuntu): add 24.10 oracular by @MaineK00n in https://github.com/future-architect/vuls/pull/2055
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in https://github.com/future-architect/vuls/pull/2058
• chore(deps): bump github.com/aquasecurity/trivy from 0.56.2 to 0.57.0 by @dependabot in https://github.com/future-architect/vuls/pull/2057
• chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2060
• feat(scanner/windows): add Windows Server 2025 and 2022, 23H2 by @MaineK00n in https://github.com/future-architect/vuls/pull/2059
• feat(oval/oracle): ignore fips patched version for non fips package versions by @wagde-orca in https://github.com/future-architect/vuls/pull/2047
• chore(deps): bump golang.org/x/text from 0.19.0 to 0.20.0 by @dependabot in https://github.com/future-architect/vuls/pull/2061
• chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 by @dependabot in https://github.com/future-architect/vuls/pull/2063
• fix(scanner/debian): fill kernel version from kernel package by @MaineK00n in https://github.com/future-architect/vuls/pull/2064
• feat(scanner): skip SSH configuration validation when ssh-key(scan|gen) failed by @MaineK00n in https://github.com/future-architect/vuls/pull/2065
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.4.1 to 1.5.0 by @dependabot in https://github.com/future-architect/vuls/pull/2068
• chore(deps): bump the aws group across 1 directory with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2069
• chore(deps): bump github.com/aquasecurity/trivy from 0.57.0 to 0.57.1 by @dependabot in https://github.com/future-architect/vuls/pull/2067
• refactor: remove old buildtag by @MaineK00n in https://github.com/future-architect/vuls/pull/2072
• feat!(scanner/rpm): change queryformat (add sourcerpm) by @MaineK00n in https://github.com/future-architect/vuls/pull/2074
• chore(deps): bump the aws group with 5 updates by @dependabot in https://github.com/future-architect/vuls/pull/2073

Full Changelog: https://github.com/future-architect/vuls/compare/v0.27.0...v0.28.0

v0.27.0 — 2024-10-09 bugfix

v0.27.0

Changelog

• 087b620175a81c4e6ac23ffa7399f2c85bb14dd7 chore(deps): bump github.com/aquasecurity/trivy from 0.55.2 to 0.56.1 (#2044)
• 7c749ea806023d1aeb3d28edbd1264351c754ebb chore(deps): bump the aws group with 5 updates (#2043)
• 939299bef91b78345a9677c3664ed1c3b9314fe1 chore(deps): bump golang.org/x/text from 0.18.0 to 0.19.0 (#2045)
• 3dd738d41b35b166a57059954fb140ec00df35a7 feat(detector/microsoft): set WindowsRoughMatch if KB or Version to be fixed is unknown (#2041)
• 80e417b0e826cccd977f2ae57bf90c00ccb4fc87 refactor: use std slices, maps package (#2042)
• d5982a25c3f569f028b88295158bfbfe742f191f chore(deps): bump dictionary versions to latest ones (#2040)
• 0e21ce2c6c97cf8d2281fe55be122480dd880fe1 fix(detector/cpe): do not overwrite distro advisories (#2039)
• efa290085ec01466d220225efac76deb3617e0bc chore(deps): bump the aws group with 4 updates (#2038)
• e6c0da61324a0c04026ffd1c031436ee2be9503a fix!(alpine): use source package for detection (#2037)
• 98cbe6ed837ce5983ddcb138f5c1577b9b7cf2bf build: update go to 1.23 (#2032)
• 29448878a730b094c2e1804e04b3f0e70330d048 chore(deps): bump github.com/aquasecurity/trivy from 0.55.1 to 0.55.2 (#2030)
• 1bdf139a4f3b889626a69c48cb65ad22dfe22af3 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#2029)
• ba2796fa6d3c764284a68d39cf043f238d3bcf5a chore(deps): bump the aws group with 5 updates (#2028)
• f00ac85780331a288e2c0f13c3f9bbf468fbc3ce chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0 to 0.9.1 (#2026)
• 888933581ffdd21a75095464238017e9bb7c83ed chore(deps): bump github.com/open-policy-agent/opa from 0.67.1 to 0.68.0 (#2027)
• 1a54673a6adebe72feda803774685ce97d30628c feat(oval/suse): skip comparing TDC package and non-TDC package (#2025)
• e776be163590f5e5c5f2ae46fbe8f455494e5bdc chore(deps): bump github.com/aquasecurity/trivy from 0.54.1 to 0.55.1 (#2022)
• ff1ac6d8fc310564589705acb34499a6668cb1df chore(deps): bump the aws group with 5 updates (#2020)
• 47bd2f115bd2600eb1defd74b3730b00cb6c5d9b chore(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 (#2023)
• 61359db5463692d03cc09960e28c5b64ed9a34b0 chore(deps): bump golang.org/x/text from 0.17.0 to 0.18.0 (#2021)
• 192e017438041f77ea8cd4b9eea0f66faee89438 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#2015)
• e049df50fa1eecdccc5348e27845b5c783ed7c76 feat!(models): add vulncheck kev (#2014)
• dce837950529084d34c6815fa66e59a4f68fa8e4 chore(deps): bump the aws group across 1 directory with 5 updates (#2013)
• 6d9c6c48ae293770124ef48f13837e8101753413 chore(deps): bump github.com/samber/lo from 1.46.0 to 1.47.0 (#2008)
• 2cb2f36fab202959d5769f2b137876cd1c7744df chore(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11 (#2012)
• 3d01ed8b00271e50c5e1ebebaf167618c5470a4f feat(models): add new cveContentType trivy:azure (#2006)
• 5858b0a4b86d4a0bece97d92f2cd581b477d82e8 chore(deps): bump github.com/gosnmp/gosnmp from 1.37.0 to 1.38.0 (#2005)
• 8eca96f12d0c8f2a96ca0884498c73e4e8d4e6cc chore(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#2004)
• 6425193bda28625e8ebd23f388b68426b5ba4b6c fix(detect/oracle): handle ksplice advisories (#2003)
• f14ca86753cb86290f89da7e23ce23b9860b8202 feat(trivy): support CVSS v4.0 (#1980)
• b2d4eafa29aa417af6d9dacc473da8bb76840d0c chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (#2002)
• 46758eed254ed3aa60afd28428820578abbd0fb7 chore(deps): bump github.com/aquasecurity/trivy from 0.53.0 to 0.54.1 (#2000)
• 733fbf55f8377216cefbcb7d60a4881ec9d5c662 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#1999)
• 369837f5426f4d3f379f2b59d564dcbe0fb206cf chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#2001)
• c3d21ea3bddf3b6c6f05a84c3064999de00f0ce9 docs: correct ubuntu oval link (#1997)
• 6c4af01d1bf80249daf18ba50c999d7f93235cff chore(deps): bump github.com/docker/docker (#1995)
• f6aee5ad97f6a7933dc7ffc791d5b8bb03487aaf chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#1994)
• 25b15e85a7187e906a8ef7953ff5d7b65ee8498b chore(deps): bump the aws group with 2 updates (#1993)
• f31cf230ab368df433a6dd5ceb8d8c6b9678585d chore(deps): bump github.com/samber/lo from 1.44.0 to 1.46.0 (#1992)
• ed0d1b8312b99fb4b09e49b8dfef5f7f1db3d78a chore(deps): bump github.com/emersion/go-smtp from 0.21.2 to 0.21.3 (#1991)
• 24ae273f7eb839a66705bf5dae13d7d4593b7530 chore(deps): bump the aws group with 5 updates (#1990)
• ab624670fb2a8e21ee67253a1c70a678cffc93bb chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#1988)
• a00fe47e5fa0bdbe8a48d307073a2249c9a84575 chore(deps): bump the aws group with 3 updates (#1987)
• d4f7550d66834fe847df422a5630972f710d1aa6 chore(deps): bump github.com/aquasecurity/trivy from 0.52.2 to 0.53.0 (#1984)
• 1333f3ac948e60c2addf52162001a75abfc75909 fix(scanner/suse): skip new line in zyper -q lu (#1986)
• ac55380bd7e72ac49b092bbbae61e2415f3eebae chore(deps): bump github.com/samber/lo from 1.39.0 to 1.44.0 (#1985)
• 109891e917215f59e657a176a28a93c00b79c0ac chore(deps): bump goreleaser/goreleaser-action from 5 to 6 (#1981)
• 4633c04d59002a15e7b31dcc7187bd2305e2d99b chore(deps): bump the aws group with 5 updates (#1983)
• 5db0fdb5d820dd4da879830c45e874e45968b8fb chore(deps): bump docker/build-push-action from 5 to 6 (#1982)
• a76302c11174ca081f656c63a000ffa746e350af feat(cve/nvd): support CVSS v4.0 (#1979)
• d8173cdd422ec9f7dfc6a43f75e905dca151a6d9 feat(cve/mitre): support go-cve-dictionary:mitre (#1978)
• 9beb5fc9f0b5b9ab5b0170e8346142ef883cb493 chore(deps): bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 (#1976)
• 0b4dfa0b31710cd4b093f659bf46f7518f6736f8 chore(deps): bump the aws group with 5 updates (#1974)
• 0a47a265536fc818750ad2ca24d8d1812b5a4d92 chore(deps): update goval-dictionary (#1973)

Generated at 2026-07-10 22:23 UTC