Why does trivy only scan lock-files in filesystem mode? #2830
Unanswered
mastacheata
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hey there,
what's the reasoning behind only scanning the main package file and not the lock file in images?
Apparently you can scan lockfiles with more information in them as shown by the composer,lock file for PHP, but the same does not apply to JS and Python, I'm wondering why.
Thanks in advance
Beta Was this translation helpful? Give feedback.
All reactions