chore(deps): update aquasec/trivy docker tag to v0.58.2

[renovate]

This PR contains the following updates:

Package	Update	Change
aquasec/trivy (source)	minor	0.57.0 -> 0.58.2

---

Release Notes

aquasecurity/trivy (aquasec/trivy)

v0.58.2

Compare Source

Changelog

• 936f06a release: v0.58.2 [release/v0.58] (#​8216)
• f72d2bc fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#​8238)
• 2896367 fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#​8237)
• b733ecc fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#​8215)

v0.58.1

Compare Source

⚡Release highlights and summary⚡

👉 https://github.com/aquasecurity/trivy/discussions/8171

Changelog

https://github.com/aquasecurity/trivy/blob/release/v0.58/CHANGELOG.md#0581-2024-12-24

v0.58.0

Compare Source

Features

• add workspaceRelationship (#​7889) (d622ca2)
• add cvss v4 score and vector in scan response (#​7968) (e0f2054)
• go: construct dependencies in the parser (#​7973) (bcdc0bb)
• go: construct dependencies of go.mod main module in the parser (#​7977) (5448ba2)
• k8s: add default commands for unknown platform (#​7863) (b1c7f55)
• misconf: log causes of HCL file parsing errors (#​7634) (e9a899a)
• oracle: add flavors support (#​7858) (b9b383e)
• secret: Add built-in secrets rules for Private Packagist (#​7826) (132d9df)
• suse: Align SUSE/OpenSUSE OS Identifiers (#​7965) (45d3b40)
• Update registry fallbacks (#​7679) (5ba9a83)

Bug Fixes

• alpine: add UID for removed packages (#​7887) (07915da)
• aws: change CPU and Memory type of ContainerDefinition to a string (#​7995) (aeeba70)
• cli: Handle empty ignore files more gracefully (#​7962) (4cfb2a9)
• debian: infinite loop (#​7928) (d982e6a)
• fs: add missing defered Cleanup() call to post analyzer fs (#​7882) (ab32297)
• Improve version comparisons when build identifiers are present (#​7873) (eda4d76)
• k8s: check all results for vulnerabilities (#​7946) (797b36f)
• misconf: do not erase variable type for child modules (#​7941) (de3b7ea)
• misconf: handle null properties in CloudFormation templates (#​7813) (99b2db3)
• misconf: load full Terraform module (#​7925) (fbc42a0)
• misconf: properly resolve local Terraform cache (#​7983) (fe3a897)
• misconf: Update trivy-checks default repo to mirror.gcr.io (#​7953) (9988147)
• misconf: wrap AWS EnvVar to iac types (#​7407) (54130dc)
• redhat: don't return error if root/buildinfo/content_manifests/ contains files that are not contentSets files (#​7912) (38775a5)
• report: handle [email protected] schema for misconfigs in sarif report (#​7898) (19aea4b)
• sbom: Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#​7871) (461a68a)
• terraform: set null value as fallback for missing variables (#​7669) (611558e)

v0.57.1

Compare Source

⚡Release highlights and summary⚡

👉https://github.com/aquasecurity/trivy/discussions/7951

Changelog

https://github.com/aquasecurity/trivy/blob/release/v0.57/CHANGELOG.md#0571-2024-11-18

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.