Hello Juan,

I started to have interest in these package, if it's okey for you,
after accepted, can I add myself as uploaders? Btw, if you need help,
please let me know.

On 2026-10-30 00:47, Juan Manuel Méndez Rey wrote:
> Control: retitle -1 ITP: trivy -- comprehensive and versatile security scanner
> Control: owner -1 Juan Manuel Méndez Rey <[email protected]>
> 
> * Package name    : trivy
>   Version         : 0.76.1
>   Upstream Contact: https://github.com/aquasecurity/trivy/issues
> * URL             : https://trivy.dev
> * License         : Apache-2.0
>   Programming Lang: Go
>   Description     : comprehensive and versatile security scanner
> 
>  Trivy has scanners that look for security issues, and targets where it
>  can find those issues.
>  .
>  Targets (what Trivy can scan):
>   - Container Image
>   - Filesystem
>   - Git Repository (remote)
>   - Virtual Machine Image
>   - Kubernetes
>  .
>  Scanners (what Trivy can find there):
>   - OS packages and software dependencies in use (SBOM)
>   - Known vulnerabilities (CVEs)
>   - IaC issues and misconfigurations
>   - Sensitive information and secrets
>   - Software licenses
> 
> Source: https://github.com/aquasecurity/trivy (moved from knqyf263/trivy).
> The license is now Apache-2.0, not AGPL-3 as in the original report.
> 
> I will maintain it in the Debian Go Packaging Team. 20 Go modules that trivy
> uses outside its tests are not in Debian yet. go-getter is in NEW, and I will
> package the others separately, each with its own ITP.
> 

-- 
cheers,
        Emmanuel Arias

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  [email protected]
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1
 ⠈⠳⣄

Attachment: signature.asc
Description: PGP signature

Reply via email to