From 872982f894e4f47289cab6ad35e123060b802f8a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 13 Jun 2026 14:15:38 +0200
Subject: [PATCH 1/2] trivy: 0.71.0 -> 0.71.1

Diff: https://github.com/aquasecurity/trivy/compare/v0.71.0...v0.71.1

Changelog: https://github.com/aquasecurity/trivy/releases/tag/v0.71.1
---
 pkgs/by-name/tr/trivy/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/tr/trivy/package.nix b/pkgs/by-name/tr/trivy/package.nix
index e5a6a88f7410..7ce81a621dac 100644
--- a/pkgs/by-name/tr/trivy/package.nix
+++ b/pkgs/by-name/tr/trivy/package.nix
@@ -17,13 +17,13 @@ buildGoModule (finalAttrs: {
   # that the signs present then are not present now.
   # Finally, weigh the risk of a compromised release against the expected
   # benefit of the update, and consider the possibility of not updating.
-  version = "0.71.0"; # Did you read the comment?
+  version = "0.71.1"; # Did you read the comment?
 
   src = fetchFromGitHub {
     owner = "aquasecurity";
     repo = "trivy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wlvG8iGPBbHV66SOT0zek2VN1QawksVQwM9LSEItzh4=";
+    hash = "sha256-4/fEc+71i5+biOtywFkwePvKoZkWK1yBWZa/Wg58E5U=";
   };
 
   # Hash mismatch on across Linux and Darwin

From 9fa50108ae12c18c5075eaf61396a13a62643c1d Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 13 Jun 2026 15:10:19 +0200
Subject: [PATCH 2/2] trivy: clean-up

---
 pkgs/by-name/tr/trivy/package.nix | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/pkgs/by-name/tr/trivy/package.nix b/pkgs/by-name/tr/trivy/package.nix
index 7ce81a621dac..a615f90d21a2 100644
--- a/pkgs/by-name/tr/trivy/package.nix
+++ b/pkgs/by-name/tr/trivy/package.nix
@@ -10,14 +10,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "trivy";
-  # As of March 2026, trivy has made compromised releases twice.
-  # At a minimum, before updating, check the diff of this package, and of all
-  # dependencies/GitHub Actions changes, carefully.
-  # Also read about how the previous compromises occurred, and ensure
-  # that the signs present then are not present now.
-  # Finally, weigh the risk of a compromised release against the expected
-  # benefit of the update, and consider the possibility of not updating.
-  version = "0.71.1"; # Did you read the comment?
+  version = "0.71.1";
 
   src = fetchFromGitHub {
     owner = "aquasecurity";
@@ -35,7 +28,6 @@ buildGoModule (finalAttrs: {
 
   ldflags = [
     "-s"
-    "-w"
     "-X=github.com/aquasecurity/trivy/pkg/version/app.ver=${finalAttrs.version}"
   ];