Trivy v0.18.1 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: trivy · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

⚡ Executive Summary (TL;DR)

Trivy v0.18.1. Source highlight: eaf2da2 Include target value in Sarif template ruleID (#991)

Visit Trivy Official Site ↗ Official Release Source ↗ All Trivy Releases 📡 Trivy RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

📄 View Raw Release Notes (Original Developer Log)

## Changelog eaf2da2 Include target value in Sarif template ruleID (#991) 083c157 chore(mkdocs): allow workflow_dispatch (#989) ## Docker images - `docker pull aquasec/trivy:0.18.1` - `docker pull ghcr.io/aquasecurity/trivy:0.18.1` - `docker pull public.ecr.aws/aquasecurity/trivy:0.18.1` - `docker pull aquasec/trivy:latest` - `docker pull ghcr.io/aquasecurity/trivy:latest` - `docker pull public.ecr.aws/aquasecurity/trivy:latest`

← Older Version Trivy v0.18.0 Newer Version → Trivy v0.18.2