Bug 59517 - Не находит уязвимости через "trivy image --scanners vuln"
Summary: Не находит уязвимости через "trivy image --scanners vuln"
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: trivy (show other bugs)
Version: unstable
Hardware: x86_64 Linux
: P5 major
Assignee: Alexey Shabalin
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-06-11 18:49 MSK by Maxim Slipenko
Modified: 2026-07-02 23:54 MSK (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Maxim Slipenko 2026-06-11 18:49:20 MSK 
trivy версии 0.70.0 (из sisyphus) на команду `trivy image --scanners vuln registry.altlinux.org/p10/alt:latest` возвращает

Report Summary

┌────────────────────────────────────────────────────────────────────┬──────┬─────────────────┐
│                               Target                               │ Type │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼──────┼─────────────────┤
│ registry.altlinux.org/p10/alt:latest (alt cpe:/o:alt:container:10) │ alt  │        0        │
└────────────────────────────────────────────────────────────────────┴──────┴─────────────────┘
...

trivy версии 0.66.0 (из p11) возвращает:

Report Summary

┌────────────────────────────────────────────────────────────────────┬──────┬─────────────────┐
│                               Target                               │ Type │ Vulnerabilities │
├────────────────────────────────────────────────────────────────────┼──────┼─────────────────┤
│ registry.altlinux.org/p10/alt:latest (alt cpe:/o:alt:container:10) │ alt  │       97        │
└────────────────────────────────────────────────────────────────────┴──────┴─────────────────┘
...
Comment 1 Repository Robot 2026-07-02 23:54:52 MSK 
trivy-0.71.2-alt1 -> sisyphus:

Mon Jun 29 2026 Aleksandr Gamzin <gamzin@altlinux> 0.71.2-alt1
- 0.71.2
- Fix order conditions bug in cpe detection.
- Use normalized version for EOL check. (Closes: #59516)
- Add `ALT Linux Team` to official vendor lists. (Closes: #59517)
- Add sisyphus support. (Closes: #59518)