trivy: 0.71.1 -> 0.71.2

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/aquasecurity/trivy/releases.

meta.description for trivy is: Simple and comprehensive vulnerability scanner for containers, suitable for CI

meta.homepage for trivy is: https://github.com/aquasecurity/trivy

meta.changelog for trivy is: https://github.com/aquasecurity/trivy/releases/tag/v0.71.2

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.71.2 with grep in /nix/store/i72gfmw10zzf5gnpnphzcagdz4fqk9la-trivy-0.71.2
• found 0.71.2 in filename of file in /nix/store/i72gfmw10zzf5gnpnphzcagdz4fqk9la-trivy-0.71.2

---

Rebuild report (if merged into master) (click to expand)

3 total rebuild path(s)

3 package rebuild(s)

First fifty rebuilds by attrpath

lazytrivy
trivy

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/i72gfmw10zzf5gnpnphzcagdz4fqk9la-trivy-0.71.2 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A trivy https://github.com/r-ryantm/nixpkgs/archive/92e3bed1d49fd401b70c38943246e69f70854eb5.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/92e3bed1d49fd401b70c38943246e69f70854eb5#trivy

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/i72gfmw10zzf5gnpnphzcagdz4fqk9la-trivy-0.71.2
ls -la /nix/store/i72gfmw10zzf5gnpnphzcagdz4fqk9la-trivy-0.71.2/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: 92e3bed1d49fd401b70c38943246e69f70854eb5

---

x86_64-linux

✅ 2 packages built:

• lazytrivy
• trivy

---

Maintainer pings

cc @fabaff @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

[nixpkgs-ci]

Backport failed for release-25.11, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-25.11
git worktree add -d .worktree/backport-533289-to-release-25.11 origin/release-25.11
cd .worktree/backport-533289-to-release-25.11
git switch --create backport-533289-to-release-25.11
git cherry-pick -x 92e3bed1d49fd401b70c38943246e69f70854eb5

[nixpkgs-ci]

Backport failed for release-25.11, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-25.11
git worktree add -d .worktree/backport-533289-to-release-25.11 origin/release-25.11
cd .worktree/backport-533289-to-release-25.11
git switch --create backport-533289-to-release-25.11
git cherry-pick -x 92e3bed1d49fd401b70c38943246e69f70854eb5

[nixpkgs-ci]

Backport failed for release-26.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-26.05
git worktree add -d .worktree/backport-533289-to-release-26.05 origin/release-26.05
cd .worktree/backport-533289-to-release-26.05
git switch --create backport-533289-to-release-26.05
git cherry-pick -x 92e3bed1d49fd401b70c38943246e69f70854eb5

[nixpkgs-ci]

Backport failed for release-26.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-26.05
git worktree add -d .worktree/backport-533289-to-release-26.05 origin/release-26.05
cd .worktree/backport-533289-to-release-26.05
git switch --create backport-533289-to-release-26.05
git cherry-pick -x 92e3bed1d49fd401b70c38943246e69f70854eb5