⚠️ Breaking Change
Impact Score: 7/10
Trivy v0.22.0 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: trivy · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
Breaking-change evidence from the source
76249bdc BREAKING: disable JAR detection in fs/repo scanning (#1512)
⚡ Executive Summary (TL;DR)
Trivy v0.22.0. Source highlight: 42f795fa fix(java/pom): ignore unsupported requirements (#1514)
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
⚠️ Breaking Changes & Deprecations (1)
- 76249bdc BREAKING: disable JAR detection in fs/repo scanning (#1512)
📄 View Raw Release Notes (Original Developer Log)
## Changelog
42f795fa fix(java/pom): ignore unsupported requirements (#1514)
8f737cc6 feat(cli): warning for root command (#1516)
76249bdc BREAKING: disable JAR detection in fs/repo scanning (#1512)
59957d4c feat(scan): support --offline-scan option (#1511)
da8b72d2 fix: improve memory usage (#1509)
b713ad0f feat(java): support pom.xml (#1501)
56115e9d docs: fixing rust link to security advisory (#1504)
7f859afa Add missing IacMetdata (#1505)
628a7964 feat(jar): add file path (#1498)
82fba771 feat(rpm): support NDB (#1497)
d5269da5 feat: added misconfiguration field for html.tpl (#1444)
## Docker images
- `docker pull aquasec/trivy:0.22.0`
- `docker pull ghcr.io/aquasecurity/trivy:0.22.0`
- `docker pull public.ecr.aws/aquasecurity/trivy:0.22.0`