TCE-1371 Bump Trivy 0.65.0 (#168)

* TCE-1371 Bump Trivy 0.65.0

* fix: Use flag `--vuln-severity-source auto` to make trivy compute results severity

---------

Co-authored-by: André Meira <[email protected]>

Author: DMarinhoCodacy

.circleci/config.yml

@@ -1,22 +1,22 @@
 version: 2.1
 
 orbs:
-  codacy: codacy/base@12.0.0
+  codacy: codacy/base@12.2.0
   codacy_plugins_test: codacy/[email protected]
 
 references:
   install_trivy_and_download_dbs: &install_trivy_and_download_dbs
     persist_to_workspace: true
-    # https://aquasecurity.github.io/trivy/v0.59/getting-started/installation/#install-script
+    # https://aquasecurity.github.io/trivy/v0.65/getting-started/installation/#install-script
     cmd: |
-      curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b . v0.59.1
+      curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b . v0.65.0
       mkdir cache
       ./trivy --cache-dir ./cache image --download-db-only
 
   build_and_publish_docker: &build_and_publish_docker
     persist_to_workspace: true
     cmd: |
-      docker build -t $CIRCLE_PROJECT_REPONAME:latest --build-arg TRIVY_VERSION=0.59.1 .
+      docker build -t $CIRCLE_PROJECT_REPONAME:latest --build-arg TRIVY_VERSION=0.65.0 .
       docker save --output docker-image.tar $CIRCLE_PROJECT_REPONAME:latest
 
 workflows:

.gitignore

@@ -13,3 +13,7 @@ bin
 cache
 *.gen.go
 .codacyrc
+
+
+#Ignore vscode AI rules
+.github/copilot-instructions.md

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.23-alpine as builder
+FROM golang:1.24-alpine as builder
 
 ARG TRIVY_VERSION=dev
 ENV TRIVY_VERSION=$TRIVY_VERSION

README.md

@@ -28,8 +28,7 @@ go mod download
  3. Run the DocGenerator:
 
 ```bash
-go run ./doc-generator.go &&\
-scala-cli doc-generator.sc
+go run ./cmd/docgen
 ```
 
 ## Test

docs/description/vulnerability.md

@@ -1,2 +1,2 @@
 ## Insecure dependencies detection (critical and high severity)
-Detects insecure dependencies (critical and high severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.
+Detects insecure dependencies (critical and high severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.

docs/description/vulnerability_medium.md

@@ -1,2 +1,2 @@
 ## Insecure dependencies detection (medium severity)
-Detects insecure dependencies (medium severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.
+Detects insecure dependencies (medium severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.

docs/description/vulnerability_minor.md

@@ -1,2 +1,2 @@
 ## Insecure dependencies detection (minor severity)
-Detects insecure dependencies (minor severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.
+Detects insecure dependencies (minor severity) by checking the libraries declared in the package manager and flagging used library versions with known security vulnerabilities.

go.mod

@@ -9,13 +9,13 @@ import (
 
 // RunnerFactory can create new Trivy runners.
 type RunnerFactory interface {
-	NewRunner(ctx context.Context, config flag.Options) (artifact.Runner, error)
+	NewRunner(ctx context.Context, config flag.Options, targetKind artifact.TargetKind, opts ...artifact.RunnerOption) (artifact.Runner, error)
 }
 
 type defaultRunnerFactory struct{}
 
-func (f defaultRunnerFactory) NewRunner(ctx context.Context, config flag.Options) (artifact.Runner, error) {
-	runner, err := artifact.NewRunner(ctx, config)
+func (f defaultRunnerFactory) NewRunner(ctx context.Context, config flag.Options, targetKind artifact.TargetKind, opts ...artifact.RunnerOption) (artifact.Runner, error) {
+	runner, err := artifact.NewRunner(ctx, config, targetKind, opts...)
 	if err != nil {
 		return nil, &ToolError{msg: "Failed to initialize Codacy Trivy", w: err}
 	}