Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(pom): add empty versions if dependency versions cannot be detected #7446

Closed
knqyf263 opened this issue Sep 5, 2024 Discussed in #7231 · 0 comments · Fixed by #7520
Closed

feat(pom): add empty versions if dependency versions cannot be detected #7446

knqyf263 opened this issue Sep 5, 2024 Discussed in #7231 · 0 comments · Fixed by #7520
Assignees
@DmitriyLewen
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Milestone
v0.56.0

Comments

@knqyf263
Copy link
Collaborator

knqyf263 commented Sep 5, 2024

Description

There are cases where the version is defined, but Trivy can't resolve it. For example, the version is inherited from a parent POM that is inaccessible to Trivy.

In such cases, the dependent package is currently ignored, but we'll change to detect the package as an empty version.

Discussed in #7231
@knqyf263 knqyf263 added the triage/support Indicates an issue that is a support question. label Sep 5, 2024
@knqyf263 knqyf263 added this to the v0.56.0 milestone Sep 5, 2024
@knqyf263 knqyf263 added kind/feature Categorizes issue or PR as related to a new feature. and removed triage/support Indicates an issue that is a support question. labels Sep 5, 2024
@DmitriyLewen DmitriyLewen mentioned this issue Sep 17, 2024
Merged
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DmitriyLewen DmitriyLewen

Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
Trivy Roadmap
Status: No status
Milestone
v0.56.0
Development

Successfully merging a pull request may close this issue.

feat(java): add empty versions if pom.xml dependency versions can't be detected DmitriyLewen/trivy
2 participants
@knqyf263 @DmitriyLewen