Trivy v0.18.0 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: trivy · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

⚡ Executive Summary (TL;DR)

Trivy v0.18.0. Source highlight: e26e39a fix(vuln) unique vulnerabilities from different data sources (#984)

Visit Trivy Official Site ↗ Official Release Source ↗ All Trivy Releases 📡 Trivy RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

📄 View Raw Release Notes (Original Developer Log)

## Release Note https://github.com/aquasecurity/trivy/discussions/990 ## Changelog e26e39a fix(vuln) unique vulnerabilities from different data sources (#984) 04e7cca feat(go): added support of gomod analyzer (#978) ## Docker images - `docker pull aquasec/trivy:0.18.0` - `docker pull ghcr.io/aquasecurity/trivy:0.18.0` - `docker pull public.ecr.aws/aquasecurity/trivy:0.18.0` - `docker pull aquasec/trivy:latest` - `docker pull ghcr.io/aquasecurity/trivy:latest` - `docker pull public.ecr.aws/aquasecurity/trivy:latest`

← Older Version Trivy v0.17.2 Newer Version → Trivy v0.18.1