Impact Score: 5/10
Trivy v0.21.2 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: trivy · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Trivy v0.21.2. Source highlight: 7beed301 docs: provide more information on scanning Google's GCR (#1426)
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
📄 View Raw Release Notes (Original Developer Log)
## Changelog
7beed301 docs: provide more information on scanning Google's GCR (#1426)
f50e1f42 docs(misconfiguration): added instruction for misconfiguration detection (#1428)
3ae4de58 Update git-repository.md (#1430)
6e35b8f5 fix(hooks): exclude unrelated lib types from system files filtering (#1431)
beb60b05 chore: run `go fmt` (#1429)
582e7fd1 fix(sarif): change `help` field in the sarif template. (#1423)
11bc2901 Update fanal with cfsec version update (#1425)
392f6892 Replace deprecated option in goreleaser (#1406)
101d5760 feat(alpine): support 3.15 (#1422)
bd3ba68c chore: test the helm chart in the PR and used the commit hash (#1414)
3860d6e4 chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
4f82673a chore(release): add ubuntu older versions to deploy script (#1416)
## Docker images
- `docker pull aquasec/trivy:0.21.2`
- `docker pull ghcr.io/aquasecurity/trivy:0.21.2`
- `docker pull public.ecr.aws/aquasecurity/trivy:0.21.2`