You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Allow specifying minor versions of tools or automatic selection of the latest #152
Feature Request: Allow us to specify minor version of the underlying tools
Quite often there are warnings and issues with the tools bundled with guardian/SDO.
I understand the need to somewhat control versions in other to know what "works" from an integration perspective, and freely allowing major version changes may be quite troublesome.
That said if we could have an override that allowed us to either specify a version to use, say TrivyVersion = 0.68.0 (allowing us to upgrade to all minor versions before 1.00 for instance), or alternatively a "TrivyUseLatestMinor=true" that would help alleviate the pains we have with the warnings/errors that are surfaced in the included tools and not directly by SDO.
Most likely. Assuming they fix issues in a high enough pace. We rarely
observe regressions here, but they do happen, and the option to "lock" on a
known good version would probably always be welcome, though i dont think
our/my case warrents this that much.
Esben
Activity
jbrotsos commentedon Jan 20, 2026
Hello Esben Bach (@esbenbach) ,
If we updated the CLIs (i.e. Trivy) more frequently on the latest release of minor versions, would this satisfy your requirement?
James
esbenbach commentedon Jan 20, 2026