Skip to content

fix: use Trivy --scanners instead of deprecated --security-checks - #81

Closed
Abhinesh Jha (Abhineshhh) wants to merge 1 commit into
microsoft:mainfrom
Abhineshhh:fix/trivy-scanners-flag
Closed

fix: use Trivy --scanners instead of deprecated --security-checks#81
Abhinesh Jha (Abhineshhh) wants to merge 1 commit into
microsoft:mainfrom
Abhineshhh:fix/trivy-scanners-flag

Conversation

@Abhineshhh

Copy link
Copy Markdown
Contributor

Description

Trivy renamed --security-checks to --scanners and deprecates the config scanner name in favor of misconfig. Update RunTrivy to the supported flags.

Related Issue

Fixes #78

Changes

  • --scanners vuln for normal scans
  • --scanners vuln,secret,misconfig for --comprehensive

Checklist

  • task lint passes locally
  • task test passes locally
  • Documentation updated (if applicable)

Trivy renamed --security-checks to --scanners and deprecates the
config scanner name in favor of misconfig. Switch RunTrivy to the
supported flags so comprehensive scans keep working when the alias is
removed.

Fixes microsoft#78
@Abhineshhh

Copy link
Copy Markdown
Contributor Author

Closing in favor of a consolidated stack to avoid multi-PR conflicts on the same files.

Superseded by consolidated Trivy stack (scanners flag is included there).

Please review the replacement PR linked above (Trivy stack or registry stack).

@Abhineshhh

Copy link
Copy Markdown
Contributor Author

Replacement: #87 (Trivy stack).

@Abhineshhh
Abhinesh Jha (Abhineshhh) deleted the fix/trivy-scanners-flag branch July 16, 2026 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Trivy invoked with deprecated --security-checks flag

1 participant