trivy: 0.71.0 -> 0.71.1 (#531361)

This commit is contained in:
Fabian Affolter
2026-06-13 19:35:12 +00:00
committed by GitHub
+2 -10
View File
@@ -10,20 +10,13 @@
buildGoModule (finalAttrs: {
pname = "trivy";
# As of March 2026, trivy has made compromised releases twice.
# At a minimum, before updating, check the diff of this package, and of all
# dependencies/GitHub Actions changes, carefully.
# Also read about how the previous compromises occurred, and ensure
# that the signs present then are not present now.
# Finally, weigh the risk of a compromised release against the expected
# benefit of the update, and consider the possibility of not updating.
version = "0.71.0"; # Did you read the comment?
version = "0.71.1";
src = fetchFromGitHub {
owner = "aquasecurity";
repo = "trivy";
tag = "v${finalAttrs.version}";
hash = "sha256-wlvG8iGPBbHV66SOT0zek2VN1QawksVQwM9LSEItzh4=";
hash = "sha256-4/fEc+71i5+biOtywFkwePvKoZkWK1yBWZa/Wg58E5U=";
};
# Hash mismatch on across Linux and Darwin
@@ -35,7 +28,6 @@ buildGoModule (finalAttrs: {
ldflags = [
"-s"
"-w"
"-X=github.com/aquasecurity/trivy/pkg/version/app.ver=${finalAttrs.version}"
];