| LOW | integration/sbom_test.go | 101 | }) | COMMENT |
| LOW | docs/guide/advanced/modules.md | 261 | // e.g. results | COMMENT |
| LOW | docs/guide/compliance/compliance.md | 121 | # - input: schema["kubernetes"] | COMMENT |
| LOW | docs/guide/scanner/misconfiguration/index.md | 321 | | COMMENT |
| LOW | docs/guide/scanner/misconfiguration/custom/index.md | 41 | A single package must contain only one policy. | COMMENT |
| LOW | docs/guide/scanner/misconfiguration/custom/selectors.md | 1 | # Input Selectors | COMMENT |
| LOW | docs/tutorials/misconfiguration/custom-checks.md | 21 | ``` | COMMENT |
| LOW | docs/community/contribute/checks/overview.md | 21 | # scope: package | COMMENT |
| LOW | examples/module/spring4shell/spring4shell.go | 141 | // PostScan takes results including custom resources and detected CVE-2022-22965. | COMMENT |
| LOW | examples/module/spring4shell/spring4shell.go | 161 | // "FilePath": "/usr/local/tomcat/RELEASE-NOTES", | COMMENT |
| LOW | examples/module/spring4shell/spring4shell.go | 181 | // "Layer": { | COMMENT |
| LOW | examples/module/spring4shell/spring4shell.go | 201 | // "redhat": 3 | COMMENT |
| LOW | rpc/cache/service.twirp.go | 1361 | } | COMMENT |
| LOW | rpc/cache/service.twirp.go | 1381 | // service. Those accessors are a low-level API for building reflection tools. | COMMENT |
| LOW | rpc/scanner/service.twirp.go | 521 | return baseServicePath(s.pathPrefix, "trivy.scanner.v1", "Scanner") | COMMENT |
| LOW | rpc/scanner/service.twirp.go | 541 | // HTTP handlers with additional methods for accessing metadata about the | COMMENT |
| LOW | helm/trivy/values.yaml | 61 | debugMode: false | COMMENT |
| LOW | helm/trivy/values.yaml | 81 | # | COMMENT |
| LOW | pkg/crypto/strength.go | 1 | package crypto | COMMENT |
| LOW | pkg/crypto/catalog.go | 1 | package crypto | COMMENT |
| LOW | pkg/crypto/catalog.go | 21 | parameterNames []ftypes.CryptoAlgorithmParameterName | COMMENT |
| LOW | pkg/crypto/parser/pkcs12/parser_test.go | 281 | } | COMMENT |
| LOW | pkg/crypto/parser/x509/parser.go | 161 | ) | COMMENT |
| LOW | pkg/result/ignore.go | 21 | "github.com/aquasecurity/trivy/pkg/log" | COMMENT |
| LOW | pkg/fingerprint/fingerprint.go | 21 | // TODO: Future implementation | COMMENT |
| LOW | pkg/sbom/core/bom.go | 121 | | COMMENT |
| LOW | pkg/sbom/core/bom.go | 141 | | COMMENT |
| LOW | pkg/sbom/core/bom.go | 161 | // BOMRef: | COMMENT |
| LOW | pkg/sbom/io/encode.go | 181 | } | COMMENT |
| LOW | pkg/sbom/io/encode.go | 201 | // -> Library component (bash-4.12) ------------------ #3 | COMMENT |
| LOW | pkg/sbom/io/encode.go | 341 | // preserving the original structure, components, and relationships | COMMENT |
| LOW | pkg/digest/source.go | 21 | // It states the algorithm and the value, but not what the value covers, so the covered | COMMENT |
| LOW | pkg/digest/source.go | 41 | // SourceJavaArchive is computed by Trivy over a Java archive (JAR/WAR/EAR/PAR, | COMMENT |
| LOW | pkg/fanal/types/package.go | 221 | | COMMENT |
| LOW | pkg/fanal/image/image.go | 81 | layerIDs = append(layerIDs, d.String()) | COMMENT |
| LOW | pkg/fanal/image/image.go | 101 | // In total, it would be like: | COMMENT |
| LOW | pkg/fanal/secret/keyword.go | 21 | // as U+212A KELVIN SIGN, is not found. A rule whose keyword holds a non-ASCII | COMMENT |
| LOW | pkg/fanal/analyzer/const.go | 141 | // License | COMMENT |
| LOW | pkg/fanal/walker/fs.go | 101 | absBase, err := filepath.Abs(base) | COMMENT |
| LOW | pkg/dependency/parser/nodejs/pnpm/parse_testcase.go | 601 | // cd ./node_modules/lodash/ | COMMENT |
| LOW | pkg/dependency/parser/nodejs/pnpm/types.go | 1 | package pnpm | COMMENT |
| LOW | pkg/dependency/parser/nodejs/pnpm/parse.go | 121 | | COMMENT |
| LOW | pkg/dependency/parser/nodejs/pnpm/parse.go | 341 | // | COMMENT |
| LOW | pkg/dependency/parser/nodejs/npm/parse_testcase.go | 701 | // npm install ms@2.0.0 --save-bundle | COMMENT |
| LOW | pkg/dependency/parser/nodejs/npm/parse_testcase.go | 1361 | // npm init --force | COMMENT |
| LOW | pkg/dependency/parser/python/uv/parse_testcase.go | 1 | package uv | COMMENT |
| LOW | pkg/dependency/parser/python/poetry/parse_testcase.go | 1 | package poetry | COMMENT |
| LOW | pkg/dependency/parser/golang/binary/parse.go | 161 | } | COMMENT |
| LOW | pkg/dependency/parser/golang/binary/parse.go | 221 | if err := fset.Parse(flags); err != nil { | COMMENT |
| LOW | pkg/dependency/parser/java/pom/mirror.go | 121 | } | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse_test.go | 1401 | }, | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse_test.go | 1481 | }, | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse_test.go | 1501 | //[INFO] | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse_test.go | 2161 | }, | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse_test.go | 2241 | }, | COMMENT |
| LOW | pkg/dependency/parser/java/pom/settings_test.go | 121 | }, | COMMENT |
| LOW | pkg/dependency/parser/java/pom/settings_test.go | 141 | // <server> | COMMENT |
| LOW | pkg/dependency/parser/java/pom/settings_test.go | 161 | // </snapshots> | COMMENT |
| LOW | pkg/dependency/parser/java/pom/settings_test.go | 181 | // <repository> | COMMENT |
| LOW | pkg/dependency/parser/java/pom/parse.go | 841 | // Do not try fetching pom.xml from remote repositories in offline mode | COMMENT |
| 55 more matches not shown… |
Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).