feature: trivy will now run with --detection-priority comprehensive CF-1835 (#168)

pedrobpereira · web-flow · commit 3e35fe82bac4 · 2025-08-08T10:27:12.000+01:00
diff --git a/.codacy/codacy.yaml b/.codacy/codacy.yaml
@@ -1,16 +1,16 @@
 runtimes:
-    - dart@3.7.2
     - go@1.22.3
     - java@17.0.10
     - node@22.2.0
     - python@3.11.11
+    - dart@3.7.2
 tools:
     - codacy-enigma-cli@0.0.1-main.8.49310c3
     - dartanalyzer@3.7.2
     - eslint@8.57.0
     - lizard@1.17.31
     - pmd@6.55.0
-    - pylint@3.3.6
-    - revive@1.7.0
+    - pylint@3.3.7
+    - revive@1.11.0
     - semgrep@1.78.0
     - trivy@0.65.0
diff --git a/tools/trivyRunner.go b/tools/trivyRunner.go
@@ -9,7 +9,7 @@ import (
 
 // RunTrivy executes Trivy vulnerability scanner with the specified options
 func RunTrivy(repositoryToAnalyseDirectory string, trivyBinary string, pathsToCheck []string, outputFile string, outputFormat string) error {
-	cmd := exec.Command(trivyBinary, "fs")
+	cmd := exec.Command(trivyBinary, "fs", "--detection-priority", "comprehensive")
 
 	// Add config file from tools-configs directory if it exists
 	if configFile, exists := ConfigFileExists(config.Config, "trivy.yaml"); exists {

-Original file line number
+Diff line change
@@ @@ -1,16 +1,16 @@ @@
 runtimes:
 -    - [email protected]
     - [email protected]
     - [email protected]
     - [email protected]
     - [email protected]
 +    - [email protected]
 tools:
     - [email protected]
     - [email protected]
     - [email protected]
     - [email protected]
     - [email protected]
 -    - [email protected].6
 -    - revive@1.7.0
 +    - [email protected].7
 +    - revive@1.11.0
     - [email protected]
     - [email protected]