[{"id":"9317618616","type":"WatchEvent","actor":{"id":596727,"login":"robertheessels","display_login":"robertheessels","gravatar_id":"","url":"https://api.github.com/users/robertheessels","avatar_url":"https://avatars.githubusercontent.com/u/596727?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T14:20:16Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9315241402","type":"IssuesEvent","actor":{"id":271251152,"login":"JesesePU","display_login":"JesesePU","gravatar_id":"","url":"https://api.github.com/users/JesesePU","avatar_url":"https://avatars.githubusercontent.com/u/271251152?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"opened","issue":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647","repository_url":"https://api.github.com/repos/aquasecurity/trivy","labels_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647/labels{/name}","comments_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647/comments","events_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647/events","html_url":"https://github.com/aquasecurity/trivy/issues/10647","id":4421190533,"node_id":"I_kwDOCsUTCM8AAAABB4YDhQ","number":10647,"title":"Anonymous Proposal: TSU Protocol","user":{"login":"JesesePU","id":271251152,"node_id":"U_kgDOECr20A","avatar_url":"https://avatars.githubusercontent.com/u/271251152?v=4","gravatar_id":"","url":"https://api.github.com/users/JesesePU","html_url":"https://github.com/JesesePU","followers_url":"https://api.github.com/users/JesesePU/followers","following_url":"https://api.github.com/users/JesesePU/following{/other_user}","gists_url":"https://api.github.com/users/JesesePU/gists{/gist_id}","starred_url":"https://api.github.com/users/JesesePU/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JesesePU/subscriptions","organizations_url":"https://api.github.com/users/JesesePU/orgs","repos_url":"https://api.github.com/users/JesesePU/repos","events_url":"https://api.github.com/users/JesesePU/events{/privacy}","received_events_url":"https://api.github.com/users/JesesePU/received_events","type":"User","user_view_type":"public","site_admin":false},"labels":[],"state":"open","locked":false,"assignees":[],"milestone":null,"comments":0,"created_at":"2026-05-11T13:25:04Z","updated_at":"2026-05-11T13:25:04Z","closed_at":null,"assignee":null,"type":null,"active_lock_reason":null,"sub_issues_summary":{"total":0,"completed":0,"percent_completed":0},"issue_dependencies_summary":{"blocked_by":0,"total_blocked_by":0,"blocking":0,"total_blocking":0},"body":"## Anonymous Proposal: TSU Protocol\n\nOpen-source RISC-V NPU standard. DAO-governed. Seeking sponsorship for first tape-out.\n\n**TSU-M1:** 5W | 8 TOPS | RV64 + 16 custom AI instructions | 28nm\n\n**GitHub:** github.com/JesesePU/tsu-protocol\n**Donate (TRC-20):** `TU8NBT5iGyMNkLwWmWmgy7tFMbKnafLHcu`","reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"timeline_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10647/timeline","performed_via_github_app":null,"state_reason":null,"pinned_comment":null}},"public":true,"created_at":"2026-05-11T13:25:06Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9312727992","type":"IssueCommentEvent","actor":{"id":220721990,"login":"mikem-of","display_login":"mikem-of","gravatar_id":"","url":"https://api.github.com/users/mikem-of","avatar_url":"https://avatars.githubusercontent.com/u/220721990?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","issue":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476","repository_url":"https://api.github.com/repos/aquasecurity/trivy","labels_url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476/labels{/name}","comments_url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476/comments","events_url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476/events","html_url":"https://github.com/aquasecurity/trivy/issues/7476","id":2515513199,"node_id":"I_kwDOCsUTCM6V769v","number":7476,"title":"enhancement(report): include/exclude dev deps in analyzers","user":{"login":"DmitriyLewen","id":91113035,"node_id":"MDQ6VXNlcjkxMTEzMDM1","avatar_url":"https://avatars.githubusercontent.com/u/91113035?v=4","gravatar_id":"","url":"https://api.github.com/users/DmitriyLewen","html_url":"https://github.com/DmitriyLewen","followers_url":"https://api.github.com/users/DmitriyLewen/followers","following_url":"https://api.github.com/users/DmitriyLewen/following{/other_user}","gists_url":"https://api.github.com/users/DmitriyLewen/gists{/gist_id}","starred_url":"https://api.github.com/users/DmitriyLewen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DmitriyLewen/subscriptions","organizations_url":"https://api.github.com/users/DmitriyLewen/orgs","repos_url":"https://api.github.com/users/DmitriyLewen/repos","events_url":"https://api.github.com/users/DmitriyLewen/events{/privacy}","received_events_url":"https://api.github.com/users/DmitriyLewen/received_events","type":"User","user_view_type":"public","site_admin":false},"labels":[],"state":"open","locked":false,"assignees":[{"login":"DmitriyLewen","id":91113035,"node_id":"MDQ6VXNlcjkxMTEzMDM1","avatar_url":"https://avatars.githubusercontent.com/u/91113035?v=4","gravatar_id":"","url":"https://api.github.com/users/DmitriyLewen","html_url":"https://github.com/DmitriyLewen","followers_url":"https://api.github.com/users/DmitriyLewen/followers","following_url":"https://api.github.com/users/DmitriyLewen/following{/other_user}","gists_url":"https://api.github.com/users/DmitriyLewen/gists{/gist_id}","starred_url":"https://api.github.com/users/DmitriyLewen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DmitriyLewen/subscriptions","organizations_url":"https://api.github.com/users/DmitriyLewen/orgs","repos_url":"https://api.github.com/users/DmitriyLewen/repos","events_url":"https://api.github.com/users/DmitriyLewen/events{/privacy}","received_events_url":"https://api.github.com/users/DmitriyLewen/received_events","type":"User","user_view_type":"public","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/aquasecurity/trivy/milestones/58","html_url":"https://github.com/aquasecurity/trivy/milestone/58","labels_url":"https://api.github.com/repos/aquasecurity/trivy/milestones/58/labels","id":13620387,"node_id":"MI_kwDOCsUTCM4Az9Sj","number":58,"title":"v0.71.0","description":"Lead: @afdesk","creator":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"open_issues":7,"closed_issues":3,"state":"open","created_at":"2025-09-04T14:18:59Z","updated_at":"2026-05-08T11:18:52Z","due_on":"2026-05-28T00:00:00Z","closed_at":null},"comments":14,"created_at":"2024-09-10T06:21:38Z","updated_at":"2026-05-11T12:24:14Z","closed_at":null,"assignee":{"login":"DmitriyLewen","id":91113035,"node_id":"MDQ6VXNlcjkxMTEzMDM1","avatar_url":"https://avatars.githubusercontent.com/u/91113035?v=4","gravatar_id":"","url":"https://api.github.com/users/DmitriyLewen","html_url":"https://github.com/DmitriyLewen","followers_url":"https://api.github.com/users/DmitriyLewen/followers","following_url":"https://api.github.com/users/DmitriyLewen/following{/other_user}","gists_url":"https://api.github.com/users/DmitriyLewen/gists{/gist_id}","starred_url":"https://api.github.com/users/DmitriyLewen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DmitriyLewen/subscriptions","organizations_url":"https://api.github.com/users/DmitriyLewen/orgs","repos_url":"https://api.github.com/users/DmitriyLewen/repos","events_url":"https://api.github.com/users/DmitriyLewen/events{/privacy}","received_events_url":"https://api.github.com/users/DmitriyLewen/received_events","type":"User","user_view_type":"public","site_admin":false},"type":null,"active_lock_reason":null,"sub_issues_summary":{"total":0,"completed":0,"percent_completed":0},"issue_dependencies_summary":{"blocked_by":0,"total_blocked_by":0,"blocking":0,"total_blocking":0},"body":"## Description\r\nWe detect all dependencies and exclude dev dependencies in `scanner`.\r\nThis worked well.\r\nBut we added `test` scope for `pom.xml` files - #7414.\r\nAnd this is a problem for `pom.xml` files, because `pom.xml` file can contain many dependencies, and users always expect all dependencies to be parsed, even if `--iclude-dev-deps` flag is missing.\r\nMore details - #7466\r\n\r\nWe used this logic to avoid splitting caches.\r\nBut `--icnlude-dev-deps` flag is only available for `fs` mode. We use `memore` cache for `fs` mode, so this is not problem.\r\n\r\nSo we need to include/exclude dev deps in analyzers.\r\n\r\n\r\n### Discussed in https://github.com/aquasecurity/trivy/discussions/7466\r\n\r\n","reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476/reactions","total_count":2,"+1":2,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"timeline_url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476/timeline","performed_via_github_app":null,"state_reason":null,"pinned_comment":null},"comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/comments/4420642016","html_url":"https://github.com/aquasecurity/trivy/issues/7476#issuecomment-4420642016","issue_url":"https://api.github.com/repos/aquasecurity/trivy/issues/7476","id":4420642016,"node_id":"IC_kwDOCsUTCM8AAAABB32k4A","user":{"login":"mikem-of","id":220721990,"node_id":"U_kgDODSfzRg","avatar_url":"https://avatars.githubusercontent.com/u/220721990?v=4","gravatar_id":"","url":"https://api.github.com/users/mikem-of","html_url":"https://github.com/mikem-of","followers_url":"https://api.github.com/users/mikem-of/followers","following_url":"https://api.github.com/users/mikem-of/following{/other_user}","gists_url":"https://api.github.com/users/mikem-of/gists{/gist_id}","starred_url":"https://api.github.com/users/mikem-of/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikem-of/subscriptions","organizations_url":"https://api.github.com/users/mikem-of/orgs","repos_url":"https://api.github.com/users/mikem-of/repos","events_url":"https://api.github.com/users/mikem-of/events{/privacy}","received_events_url":"https://api.github.com/users/mikem-of/received_events","type":"User","user_view_type":"public","site_admin":false},"created_at":"2026-05-11T12:24:14Z","updated_at":"2026-05-11T12:24:14Z","body":"+1 on this enhancement.\n\nFrom a security perspective, `devDependencies` should be first-class in scanning (with clear include/exclude control). We’ve seen multiple npm supply-chain incidents recently where the initial compromise path was in dev tooling and build-time packages.\n\nSupporting this issue would improve security coverage. I would even argue that `devDependencies` should be included by default, with a way to opt out (e.g. with a `--prod` flag for example).\n\nAlso for ecosystem consistency: both [`npm audit`](https://docs.npmjs.com/cli/v11/commands/npm-audit#include) and [`pnpm audit`](https://pnpm.io/cli/audit#--prod--p) support auditing dev dependencies,.","pin":null,"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/comments/4420642016/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"performed_via_github_app":null}},"public":true,"created_at":"2026-05-11T12:24:14Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9312580827","type":"WatchEvent","actor":{"id":116617647,"login":"IgnatiusFarel","display_login":"IgnatiusFarel","gravatar_id":"","url":"https://api.github.com/users/IgnatiusFarel","avatar_url":"https://avatars.githubusercontent.com/u/116617647?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T12:20:35Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9309366309","type":"WatchEvent","actor":{"id":4696566,"login":"ar1kumar","display_login":"ar1kumar","gravatar_id":"","url":"https://api.github.com/users/ar1kumar","avatar_url":"https://avatars.githubusercontent.com/u/4696566?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T10:56:01Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9308998322","type":"IssuesEvent","actor":{"id":271251152,"login":"JesesePU","display_login":"JesesePU","gravatar_id":"","url":"https://api.github.com/users/JesesePU","avatar_url":"https://avatars.githubusercontent.com/u/271251152?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"opened","issue":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646","repository_url":"https://api.github.com/repos/aquasecurity/trivy","labels_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646/labels{/name}","comments_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646/comments","events_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646/events","html_url":"https://github.com/aquasecurity/trivy/issues/10646","id":4420152593,"node_id":"I_kwDOCsUTCM8AAAABB3YtEQ","number":10646,"title":"Anonymous Proposal: TSU Protocol — Open-Source RISC-V NPU","user":{"login":"JesesePU","id":271251152,"node_id":"U_kgDOECr20A","avatar_url":"https://avatars.githubusercontent.com/u/271251152?v=4","gravatar_id":"","url":"https://api.github.com/users/JesesePU","html_url":"https://github.com/JesesePU","followers_url":"https://api.github.com/users/JesesePU/followers","following_url":"https://api.github.com/users/JesesePU/following{/other_user}","gists_url":"https://api.github.com/users/JesesePU/gists{/gist_id}","starred_url":"https://api.github.com/users/JesesePU/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JesesePU/subscriptions","organizations_url":"https://api.github.com/users/JesesePU/orgs","repos_url":"https://api.github.com/users/JesesePU/repos","events_url":"https://api.github.com/users/JesesePU/events{/privacy}","received_events_url":"https://api.github.com/users/JesesePU/received_events","type":"User","user_view_type":"public","site_admin":false},"labels":[],"state":"open","locked":false,"assignees":[],"milestone":null,"comments":0,"created_at":"2026-05-11T10:46:57Z","updated_at":"2026-05-11T10:46:57Z","closed_at":null,"assignee":null,"type":null,"active_lock_reason":null,"sub_issues_summary":{"total":0,"completed":0,"percent_completed":0},"issue_dependencies_summary":{"blocked_by":0,"total_blocked_by":0,"blocking":0,"total_blocking":0},"body":"## Anonymous Proposal: TSU Protocol\n\nOpen-source RISC-V NPU standard. DAO-governed. Seeking sponsorship for first tape-out.\n\n**TSU-M1:** 5W | 8 TOPS | RV64 + 16 custom AI instructions | 28nm\n\n**GitHub:** github.com/JesesePU/tsu-protocol\n**Donate (TRC-20):** `TU8NBT5iGyMNkLwWmWmgy7tFMbKnafLHcu`","reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"timeline_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10646/timeline","performed_via_github_app":null,"state_reason":null,"pinned_comment":null}},"public":true,"created_at":"2026-05-11T10:46:59Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9304790308","type":"WatchEvent","actor":{"id":3164137,"login":"subhaniminhas","display_login":"subhaniminhas","gravatar_id":"","url":"https://api.github.com/users/subhaniminhas","avatar_url":"https://avatars.githubusercontent.com/u/3164137?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T09:02:18Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303148599","type":"PullRequestReviewCommentEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295134","pull_request_review_id":4261796204,"id":3217295134,"node_id":"PRRC_kwDOCsUTCM6_xAce","diff_hunk":"@@ -89,6 +91,20 @@ func (s Service) Scan(ctx context.Context, targetName, artifactKey string, blobK\n \t\tlog.Info(\"Overriding detected OS with provided distro\", log.String(\"detected\", detail.OS.String()),\n \t\t\tlog.String(\"provided\", options.Distro.String()))\n \t\tdetail.OS = options.Distro\n+\n+\t\t// Override OS packages PURL to update the distro,\n+\t\t// preserving the correlation between the OS and package PURLs.\n+\t\tlom.Map(detail.Packages, func(pkg ftypes.Package) ftypes.Package {\n+\t\t\tp, pErr := purl.New(detail.OS.Family, types.Metadata{OS: &detail.OS}, pkg)\n+\t\t\tif pErr != nil {\n+\t\t\t\tlog.Error(\"Failed to create PackageURL\", log.Err(pErr))\n+\t\t\t\treturn pkg\n+\t\t\t}\n+\n+\t\t\tpkg.Identifier.PURL = p.Unwrap()\n+\t\t\treturn pkg\n+\t\t})\n+","path":"pkg/scan/local/service.go","commit_id":"a47969af3443ee10e60861b04ef9239846e28898","original_commit_id":"a47969af3443ee10e60861b04ef9239846e28898","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":"nit: extra blank line before the closing `}` of the `if` block.","created_at":"2026-05-11T08:17:41Z","updated_at":"2026-05-11T08:17:41Z","html_url":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295134","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"self":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295134"},"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295134"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295134/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"original_position":33,"position":33,"subject_type":"line"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}}},"public":true,"created_at":"2026-05-11T08:17:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303102473","type":"PullRequestReviewEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"review":{"id":4261796204,"node_id":"PRR_kwDOCsUTCM7-Bdls","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":null,"commit_id":"a47969af3443ee10e60861b04ef9239846e28898","state":"commented","html_url":"https://github.com/aquasecurity/trivy/pull/10298#pullrequestreview-4261796204","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#pullrequestreview-4261796204"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"submitted_at":"2026-05-11T08:17:40Z","updated_at":"2026-05-11T08:17:41Z"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}},"action":"created"},"public":true,"created_at":"2026-05-11T08:17:43Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303101692","type":"PullRequestReviewCommentEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295142","pull_request_review_id":4261796204,"id":3217295142,"node_id":"PRRC_kwDOCsUTCM6_xAcm","diff_hunk":"@@ -69,6 +71,16 @@ func TestClientServer(t *testing.T) {\n \t\t\toverride: func(_ *testing.T, want, _ *types.Report) {\n \t\t\t\twant.Metadata.OS.Name = \"3.10\"\n \t\t\t\twant.Results[0].Target = \"testdata/fixtures/images/alpine-39.tar.gz (alpine 3.10)\"\n+\t\t\t\tfor i := range want.Results[0].Vulnerabilities {\n+\t\t\t\t\tp := *want.Results[0].Vulnerabilities[i].PkgIdentifier.PURL // Copy PURL to avoid shadowing overwrite","path":"integration/client_server_test.go","commit_id":"a47969af3443ee10e60861b04ef9239846e28898","original_commit_id":"a47969af3443ee10e60861b04ef9239846e28898","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":"Same question as the one on `standalone_tar_test.go` — could you share what this copy is protecting against? As far as I can tell each Vulnerability already has its own PURL pointer.","created_at":"2026-05-11T08:17:41Z","updated_at":"2026-05-11T08:17:41Z","html_url":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295142","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"self":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295142"},"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295142"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295142/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"original_position":14,"position":14,"subject_type":"line"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}}},"public":true,"created_at":"2026-05-11T08:17:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303101680","type":"PullRequestReviewCommentEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295137","pull_request_review_id":4261796204,"id":3217295137,"node_id":"PRRC_kwDOCsUTCM6_xAch","diff_hunk":"@@ -477,6 +479,16 @@ func TestTarWithOverride(t *testing.T) {\n \t\t\toverride: func(_ *testing.T, want, _ *types.Report) {\n \t\t\t\twant.Metadata.OS.Name = \"3.10\"\n \t\t\t\twant.Results[0].Target = \"testdata/fixtures/images/alpine-39.tar.gz (alpine 3.10)\"\n+\t\t\t\tfor i := range want.Results[0].Vulnerabilities {\n+\t\t\t\t\tp := *want.Results[0].Vulnerabilities[i].PkgIdentifier.PURL // Copy PURL to avoid shadowing overwrite","path":"integration/standalone_tar_test.go","commit_id":"a47969af3443ee10e60861b04ef9239846e28898","original_commit_id":"a47969af3443ee10e60861b04ef9239846e28898","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":"Could you elaborate on what this copy is guarding against? I might be missing something.\n\nA couple of things confuse me when I read this:\n\n- `p := *...PURL` is a shallow copy of the struct, so `p.Qualifiers` still shares its backing array with the original PURL. `lom.Map(p.Qualifiers, ...)` ends up mutating the original underlying array regardless.\n- Each Vulnerability seems to have its own PURL pointer to begin with — `PkgIdentifier.UnmarshalJSON` parses each PURL with `packageurl.FromString` and stores `&p`, so the pointer doesn't look like it's shared with other Vulnerabilities or other test cases as far as I can tell.\n\nGiven that, I'm not quite sure what the \"shadowing overwrite\" in the comment refers to. Is there a case I'm missing where the original PURL needs to be preserved? If not, would something like this work?\n\n```go\nfor i := range want.Results[0].Vulnerabilities {\n    qs := want.Results[0].Vulnerabilities[i].PkgIdentifier.PURL.Qualifiers\n    lom.Map(qs, func(q packageurl.Qualifier) packageurl.Qualifier {\n        if q.Key == \"distro\" {\n            q.Value = \"3.10\"\n        }\n        return q\n    })\n}\n```","created_at":"2026-05-11T08:17:41Z","updated_at":"2026-05-11T08:17:41Z","html_url":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295137","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"self":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295137"},"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295137"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295137/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"original_position":14,"position":14,"subject_type":"line"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}}},"public":true,"created_at":"2026-05-11T08:17:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303101235","type":"PullRequestReviewCommentEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295125","pull_request_review_id":4261796204,"id":3217295125,"node_id":"PRRC_kwDOCsUTCM6_xAcV","diff_hunk":"@@ -89,6 +91,20 @@ func (s Service) Scan(ctx context.Context, targetName, artifactKey string, blobK\n \t\tlog.Info(\"Overriding detected OS with provided distro\", log.String(\"detected\", detail.OS.String()),\n \t\t\tlog.String(\"provided\", options.Distro.String()))\n \t\tdetail.OS = options.Distro\n+\n+\t\t// Override OS packages PURL to update the distro,\n+\t\t// preserving the correlation between the OS and package PURLs.\n+\t\tlom.Map(detail.Packages, func(pkg ftypes.Package) ftypes.Package {\n+\t\t\tp, pErr := purl.New(detail.OS.Family, types.Metadata{OS: &detail.OS}, pkg)\n+\t\t\tif pErr != nil {\n+\t\t\t\tlog.Error(\"Failed to create PackageURL\", log.Err(pErr))\n+\t\t\t\treturn pkg\n+\t\t\t}\n+\n+\t\t\tpkg.Identifier.PURL = p.Unwrap()","path":"pkg/scan/local/service.go","commit_id":"a47969af3443ee10e60861b04ef9239846e28898","original_commit_id":"a47969af3443ee10e60861b04ef9239846e28898","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":"`purl.New` can return `(nil, nil)` for some types (e.g. Go, OCI) when the package can't produce a meaningful PURL. The current code calls `p.Unwrap()` on that nil (nil-safe) and ends up overwriting the existing `pkg.Identifier.PURL` with nil.\n\nOS package types shouldn't hit that path today, so probably not an immediate issue. But it depends on `purl.New`'s internal behavior, which feels a bit fragile to future changes there. WDYT about skipping the write when `p` is nil, so the existing PURL is preserved?\n\n```go\nif p == nil {\n    return pkg\n}\npkg.Identifier.PURL = p.Unwrap()\n```","created_at":"2026-05-11T08:17:41Z","updated_at":"2026-05-11T08:17:41Z","html_url":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295125","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"self":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295125"},"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295125"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295125/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"original_position":30,"position":30,"subject_type":"line"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}}},"public":true,"created_at":"2026-05-11T08:17:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9303101051","type":"PullRequestReviewCommentEvent","actor":{"id":2253692,"login":"knqyf263","display_login":"knqyf263","gravatar_id":"","url":"https://api.github.com/users/knqyf263","avatar_url":"https://avatars.githubusercontent.com/u/2253692?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"created","comment":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295119","pull_request_review_id":4261796204,"id":3217295119,"node_id":"PRRC_kwDOCsUTCM6_xAcP","diff_hunk":"@@ -89,6 +91,20 @@ func (s Service) Scan(ctx context.Context, targetName, artifactKey string, blobK\n \t\tlog.Info(\"Overriding detected OS with provided distro\", log.String(\"detected\", detail.OS.String()),\n \t\t\tlog.String(\"provided\", options.Distro.String()))\n \t\tdetail.OS = options.Distro\n+\n+\t\t// Override OS packages PURL to update the distro,\n+\t\t// preserving the correlation between the OS and package PURLs.\n+\t\tlom.Map(detail.Packages, func(pkg ftypes.Package) ftypes.Package {","path":"pkg/scan/local/service.go","commit_id":"a47969af3443ee10e60861b04ef9239846e28898","original_commit_id":"a47969af3443ee10e60861b04ef9239846e28898","user":{"login":"knqyf263","id":2253692,"node_id":"MDQ6VXNlcjIyNTM2OTI=","avatar_url":"https://avatars.githubusercontent.com/u/2253692?v=4","gravatar_id":"","url":"https://api.github.com/users/knqyf263","html_url":"https://github.com/knqyf263","followers_url":"https://api.github.com/users/knqyf263/followers","following_url":"https://api.github.com/users/knqyf263/following{/other_user}","gists_url":"https://api.github.com/users/knqyf263/gists{/gist_id}","starred_url":"https://api.github.com/users/knqyf263/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knqyf263/subscriptions","organizations_url":"https://api.github.com/users/knqyf263/orgs","repos_url":"https://api.github.com/users/knqyf263/repos","events_url":"https://api.github.com/users/knqyf263/events{/privacy}","received_events_url":"https://api.github.com/users/knqyf263/received_events","type":"User","user_view_type":"public","site_admin":false},"body":"nit: I personally found `lom.Map` here a bit harder to read than a plain `for` loop. Just sharing as one alternative — happy to defer to your preference.\r\n\r\n- `Map` reads as an immutable transform to me, so discarding the return value to perform a mutation feels slightly misleading. The body is also pretty short ([samber/lo/mutable/slice.go#L41-L45](https://github.com/samber/lo/blob/ea94cc5c87402ee30dcaac4426951000c91a2c8c/mutable/slice.go#L41-L45)):\r\n\r\n  ```go\r\n  func Map[T any, Slice ~[]T](collection Slice, transform func(item T) T) {\r\n      for i := range collection {\r\n          collection[i] = transform(collection[i])\r\n      }\r\n  }\r\n  ```\r\n\r\n  so it doesn't really make the call site shorter either.\r\n\r\n- It also pays two extra copies of `Package` per element (parameter + return). For a struct like `ftypes.Package` (27 fields, several slices, a pointer), it may be overhead. In a quick stand-in benchmark a plain `for` loop is roughly 20-40% faster at n=10..1000. The absolute delta is negligible in a full scan, so not asking for the change on perf grounds — just noting that I don't see a readability win to offset the indirection.\r\n\r\nIf you find `lom.Map` more readable here, that's fine. For reference, the same logic as a plain loop:\r\n\r\n```go\r\nfor i := range detail.Packages {\r\n    p, err := purl.New(detail.OS.Family, types.Metadata{OS: &detail.OS}, detail.Packages[i])\r\n    if err != nil {\r\n        log.Error(\"Failed to create PackageURL\", log.Err(err))\r\n        continue\r\n    }\r\n    detail.Packages[i].Identifier.PURL = p.Unwrap()\r\n}\r\n```","created_at":"2026-05-11T08:17:41Z","updated_at":"2026-05-11T08:18:48Z","html_url":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295119","pull_request_url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","_links":{"self":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295119"},"html":{"href":"https://github.com/aquasecurity/trivy/pull/10298#discussion_r3217295119"},"pull_request":{"href":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298"}},"reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/comments/3217295119/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"original_position":23,"position":23,"subject_type":"line"},"pull_request":{"url":"https://api.github.com/repos/aquasecurity/trivy/pulls/10298","id":3348397386,"number":10298,"head":{"ref":"fix/overwrite-os-pkg-purl-for-distro-flag","sha":"a47969af3443ee10e60861b04ef9239846e28898","repo":{"id":1171561241,"url":"https://api.github.com/repos/DmitriyLewen/trivy","name":"trivy"}},"base":{"ref":"main","sha":"99eabdf3a71fb9219544e8f6a07a7468a4ac7251","repo":{"id":180687624,"url":"https://api.github.com/repos/aquasecurity/trivy","name":"trivy"}}}},"public":true,"created_at":"2026-05-11T08:17:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9302534715","type":"WatchEvent","actor":{"id":39299265,"login":"onggizam","display_login":"onggizam","gravatar_id":"","url":"https://api.github.com/users/onggizam","avatar_url":"https://avatars.githubusercontent.com/u/39299265?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T08:02:27Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9301127129","type":"WatchEvent","actor":{"id":128488930,"login":"b769wu","display_login":"b769wu","gravatar_id":"","url":"https://api.github.com/users/b769wu","avatar_url":"https://avatars.githubusercontent.com/u/128488930?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T07:23:53Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9299690291","type":"WatchEvent","actor":{"id":180278703,"login":"ABC4RDacademy","display_login":"ABC4RDacademy","gravatar_id":"","url":"https://api.github.com/users/ABC4RDacademy","avatar_url":"https://avatars.githubusercontent.com/u/180278703?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T06:40:22Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9299528238","type":"WatchEvent","actor":{"id":3462541,"login":"Margen67","display_login":"Margen67","gravatar_id":"","url":"https://api.github.com/users/Margen67","avatar_url":"https://avatars.githubusercontent.com/u/3462541?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T06:34:45Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9298939639","type":"WatchEvent","actor":{"id":131951713,"login":"DaniDeer","display_login":"DaniDeer","gravatar_id":"","url":"https://api.github.com/users/DaniDeer","avatar_url":"https://avatars.githubusercontent.com/u/131951713?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T06:13:26Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9298603583","type":"IssuesEvent","actor":{"id":271251152,"login":"JesesePU","display_login":"JesesePU","gravatar_id":"","url":"https://api.github.com/users/JesesePU","avatar_url":"https://avatars.githubusercontent.com/u/271251152?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"opened","issue":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645","repository_url":"https://api.github.com/repos/aquasecurity/trivy","labels_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645/labels{/name}","comments_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645/comments","events_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645/events","html_url":"https://github.com/aquasecurity/trivy/issues/10645","id":4418421250,"node_id":"I_kwDOCsUTCM8AAAABB1vCAg","number":10645,"title":"Anonymous Proposal: TSU Protocol — Open-Source RISC-V NPU","user":{"login":"JesesePU","id":271251152,"node_id":"U_kgDOECr20A","avatar_url":"https://avatars.githubusercontent.com/u/271251152?v=4","gravatar_id":"","url":"https://api.github.com/users/JesesePU","html_url":"https://github.com/JesesePU","followers_url":"https://api.github.com/users/JesesePU/followers","following_url":"https://api.github.com/users/JesesePU/following{/other_user}","gists_url":"https://api.github.com/users/JesesePU/gists{/gist_id}","starred_url":"https://api.github.com/users/JesesePU/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JesesePU/subscriptions","organizations_url":"https://api.github.com/users/JesesePU/orgs","repos_url":"https://api.github.com/users/JesesePU/repos","events_url":"https://api.github.com/users/JesesePU/events{/privacy}","received_events_url":"https://api.github.com/users/JesesePU/received_events","type":"User","user_view_type":"public","site_admin":false},"labels":[],"state":"open","locked":false,"assignees":[],"milestone":null,"comments":0,"created_at":"2026-05-11T06:00:16Z","updated_at":"2026-05-11T06:00:16Z","closed_at":null,"assignee":null,"type":null,"active_lock_reason":null,"sub_issues_summary":{"total":0,"completed":0,"percent_completed":0},"issue_dependencies_summary":{"blocked_by":0,"total_blocked_by":0,"blocking":0,"total_blocking":0},"body":"## Anonymous Proposal: TSU Protocol\n\nOpen-source RISC-V NPU standard. DAO-governed. Seeking sponsorship for first tape-out.\n\n**TSU-M1:** 5W | 8 TOPS | RV64 + 16 custom AI instructions | 28nm\n\n**GitHub:** github.com/JesesePU/tsu-protocol\n**Donate (TRC-20):** `TU8NBT5iGyMNkLwWmWmgy7tFMbKnafLHcu`","reactions":{"url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645/reactions","total_count":0,"+1":0,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0},"timeline_url":"https://api.github.com/repos/aquasecurity/trivy/issues/10645/timeline","performed_via_github_app":null,"state_reason":null,"pinned_comment":null}},"public":true,"created_at":"2026-05-11T06:00:18Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9298362438","type":"WatchEvent","actor":{"id":262790553,"login":"AK35M","display_login":"AK35M","gravatar_id":"","url":"https://api.github.com/users/AK35M","avatar_url":"https://avatars.githubusercontent.com/u/262790553?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T05:50:56Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9297412427","type":"WatchEvent","actor":{"id":127379178,"login":"keepold","display_login":"keepold","gravatar_id":"","url":"https://api.github.com/users/keepold","avatar_url":"https://avatars.githubusercontent.com/u/127379178?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T05:09:00Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9296282638","type":"WatchEvent","actor":{"id":7581178,"login":"bparbhu","display_login":"bparbhu","gravatar_id":"","url":"https://api.github.com/users/bparbhu","avatar_url":"https://avatars.githubusercontent.com/u/7581178?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-11T04:15:14Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9290992904","type":"ForkEvent","actor":{"id":198121429,"login":"FAZIMIKETRADING2","display_login":"FAZIMIKETRADING2","gravatar_id":"","url":"https://api.github.com/users/FAZIMIKETRADING2","avatar_url":"https://avatars.githubusercontent.com/u/198121429?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"forked","forkee":{"id":1235002521,"node_id":"R_kgDOSZykmQ","name":"Quarantine-trivy","full_name":"FAZIMIKETRADING2/Quarantine-trivy","private":false,"owner":{"login":"FAZIMIKETRADING2","id":198121429,"node_id":"U_kgDOC88X1Q","avatar_url":"https://avatars.githubusercontent.com/u/198121429?v=4","gravatar_id":"","url":"https://api.github.com/users/FAZIMIKETRADING2","html_url":"https://github.com/FAZIMIKETRADING2","followers_url":"https://api.github.com/users/FAZIMIKETRADING2/followers","following_url":"https://api.github.com/users/FAZIMIKETRADING2/following{/other_user}","gists_url":"https://api.github.com/users/FAZIMIKETRADING2/gists{/gist_id}","starred_url":"https://api.github.com/users/FAZIMIKETRADING2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FAZIMIKETRADING2/subscriptions","organizations_url":"https://api.github.com/users/FAZIMIKETRADING2/orgs","repos_url":"https://api.github.com/users/FAZIMIKETRADING2/repos","events_url":"https://api.github.com/users/FAZIMIKETRADING2/events{/privacy}","received_events_url":"https://api.github.com/users/FAZIMIKETRADING2/received_events","type":"User","user_view_type":"public","site_admin":false},"html_url":"https://github.com/FAZIMIKETRADING2/Quarantine-trivy","description":"Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more","fork":true,"url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy","forks_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/forks","keys_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/teams","hooks_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/hooks","issue_events_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/issues/events{/number}","events_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/events","assignees_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/assignees{/user}","branches_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/branches{/branch}","tags_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/tags","blobs_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/git/refs{/sha}","trees_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/statuses/{sha}","languages_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/languages","stargazers_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/stargazers","contributors_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/contributors","subscribers_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/subscribers","subscription_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/subscription","commits_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/commits{/sha}","git_commits_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/git/commits{/sha}","comments_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/comments{/number}","issue_comment_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/issues/comments{/number}","contents_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/contents/{+path}","compare_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/merges","archive_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/downloads","issues_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/issues{/number}","pulls_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/pulls{/number}","milestones_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/milestones{/number}","notifications_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/labels{/name}","releases_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/releases{/id}","deployments_url":"https://api.github.com/repos/FAZIMIKETRADING2/Quarantine-trivy/deployments","created_at":"2026-05-10T23:03:52Z","updated_at":"2026-05-10T23:03:52Z","pushed_at":"2026-05-08T23:24:04Z","git_url":"git://github.com/FAZIMIKETRADING2/Quarantine-trivy.git","ssh_url":"git@github.com:FAZIMIKETRADING2/Quarantine-trivy.git","clone_url":"https://github.com/FAZIMIKETRADING2/Quarantine-trivy.git","svn_url":"https://github.com/FAZIMIKETRADING2/Quarantine-trivy","homepage":"https://trivy.dev","size":935770,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":[],"visibility":"public","forks":0,"open_issues":0,"watchers":0,"default_branch":"main"}},"public":true,"created_at":"2026-05-10T23:03:52Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9290768888","type":"ForkEvent","actor":{"id":88367072,"login":"AVI-SHUKLA1110","display_login":"AVI-SHUKLA1110","gravatar_id":"","url":"https://api.github.com/users/AVI-SHUKLA1110","avatar_url":"https://avatars.githubusercontent.com/u/88367072?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"forked","forkee":{"id":1234994103,"node_id":"R_kgDOSZyDtw","name":"trivy","full_name":"AVI-SHUKLA1110/trivy","private":false,"owner":{"login":"AVI-SHUKLA1110","id":88367072,"node_id":"MDQ6VXNlcjg4MzY3MDcy","avatar_url":"https://avatars.githubusercontent.com/u/88367072?v=4","gravatar_id":"","url":"https://api.github.com/users/AVI-SHUKLA1110","html_url":"https://github.com/AVI-SHUKLA1110","followers_url":"https://api.github.com/users/AVI-SHUKLA1110/followers","following_url":"https://api.github.com/users/AVI-SHUKLA1110/following{/other_user}","gists_url":"https://api.github.com/users/AVI-SHUKLA1110/gists{/gist_id}","starred_url":"https://api.github.com/users/AVI-SHUKLA1110/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AVI-SHUKLA1110/subscriptions","organizations_url":"https://api.github.com/users/AVI-SHUKLA1110/orgs","repos_url":"https://api.github.com/users/AVI-SHUKLA1110/repos","events_url":"https://api.github.com/users/AVI-SHUKLA1110/events{/privacy}","received_events_url":"https://api.github.com/users/AVI-SHUKLA1110/received_events","type":"User","user_view_type":"public","site_admin":false},"html_url":"https://github.com/AVI-SHUKLA1110/trivy","description":"Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more","fork":true,"url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy","forks_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/forks","keys_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/teams","hooks_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/hooks","issue_events_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/issues/events{/number}","events_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/events","assignees_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/assignees{/user}","branches_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/branches{/branch}","tags_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/tags","blobs_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/git/refs{/sha}","trees_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/statuses/{sha}","languages_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/languages","stargazers_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/stargazers","contributors_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/contributors","subscribers_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/subscribers","subscription_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/subscription","commits_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/commits{/sha}","git_commits_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/git/commits{/sha}","comments_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/comments{/number}","issue_comment_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/issues/comments{/number}","contents_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/contents/{+path}","compare_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/merges","archive_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/downloads","issues_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/issues{/number}","pulls_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/pulls{/number}","milestones_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/milestones{/number}","notifications_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/labels{/name}","releases_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/releases{/id}","deployments_url":"https://api.github.com/repos/AVI-SHUKLA1110/trivy/deployments","created_at":"2026-05-10T22:43:25Z","updated_at":"2026-05-10T22:43:25Z","pushed_at":"2026-05-08T23:24:04Z","git_url":"git://github.com/AVI-SHUKLA1110/trivy.git","ssh_url":"git@github.com:AVI-SHUKLA1110/trivy.git","clone_url":"https://github.com/AVI-SHUKLA1110/trivy.git","svn_url":"https://github.com/AVI-SHUKLA1110/trivy","homepage":"https://trivy.dev","size":935770,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":[],"visibility":"public","forks":0,"open_issues":0,"watchers":0,"default_branch":"main"}},"public":true,"created_at":"2026-05-10T22:43:25Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9290707304","type":"WatchEvent","actor":{"id":279138709,"login":"WattDoveSucceed","display_login":"WattDoveSucceed","gravatar_id":"","url":"https://api.github.com/users/WattDoveSucceed","avatar_url":"https://avatars.githubusercontent.com/u/279138709?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T22:37:46Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9289295201","type":"WatchEvent","actor":{"id":22921911,"login":"richie-tt","display_login":"richie-tt","gravatar_id":"","url":"https://api.github.com/users/richie-tt","avatar_url":"https://avatars.githubusercontent.com/u/22921911?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T20:37:27Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9286766651","type":"WatchEvent","actor":{"id":8258439,"login":"crackqing","display_login":"crackqing","gravatar_id":"","url":"https://api.github.com/users/crackqing","avatar_url":"https://avatars.githubusercontent.com/u/8258439?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T17:08:36Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9285729637","type":"WatchEvent","actor":{"id":134110830,"login":"madmti","display_login":"madmti","gravatar_id":"","url":"https://api.github.com/users/madmti","avatar_url":"https://avatars.githubusercontent.com/u/134110830?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T15:46:14Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9285252750","type":"WatchEvent","actor":{"id":89954085,"login":"audiophonicz","display_login":"audiophonicz","gravatar_id":"","url":"https://api.github.com/users/audiophonicz","avatar_url":"https://avatars.githubusercontent.com/u/89954085?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T15:08:31Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}},{"id":"9284143691","type":"WatchEvent","actor":{"id":123311338,"login":"Anon3289","display_login":"Anon3289","gravatar_id":"","url":"https://api.github.com/users/Anon3289","avatar_url":"https://avatars.githubusercontent.com/u/123311338?"},"repo":{"id":180687624,"name":"aquasecurity/trivy","url":"https://api.github.com/repos/aquasecurity/trivy"},"payload":{"action":"started"},"public":true,"created_at":"2026-05-10T13:39:41Z","org":{"id":12783832,"login":"aquasecurity","gravatar_id":"","url":"https://api.github.com/orgs/aquasecurity","avatar_url":"https://avatars.githubusercontent.com/u/12783832?"}}]