This update for trivy fixes the following issues: Update to version 0.68.2: Security fixes: - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches (bsc#1227010). - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234512). - CVE-2024-45338: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content (bsc#1235265). - CVE-2024-51744: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232948). - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs (bsc#1250625). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239225). - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239385). - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241724). - CVE-2025-27144: gopkg.in/go-jose/go-jose.v2: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237618). - CVE-2025-30204: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing (bsc#1240466). - CVE-2025-46569: github.com/open-policy-agent/opa: HTTP request path can be crafted to inject Rego code into a constructed query when a virtual document is requested through the Data API (bsc#1246730). - CVE-2025-47291: github.com/containerd/containerd/v2: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (bsc#1243633). - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251363). - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253512). - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253977). - CVE-2025-53547: helm.sh/helm/v3: Helm Chart Code Execution (bsc#1246151). - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248937, bsc#1248897). - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253786). - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (bsc#1251547). Other fixes: - Update installation.md (#8979) - chore(alpine): add EOL date for Alpine 3.21 (#8221) - chore(alpine): add EOL date for Alpine 3.22 (#8992) - chore(cli): Remove Trivy Cloud (#9847) - chore(deps): Bump trivy-checks (#7819) - chore(deps): Bump trivy-checks (#8310) - chore(deps): Bump trivy-checks (#8619) - chore(deps): Bump trivy-checks (#8934) - chore(deps): Bump trivy-checks to v1.7.1 (#8467) - chore(deps): Bump up trivy-checks to v1.3.0 (#7959) - chore(deps): Switch to go-viper/mapstructure (#9579) - chore(deps): Update trivy-checks (#8798) - chore(deps): Upgrade trivy-checks (#8018) - chore(deps): bump Go to `v1.23.5` (#8341) - chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343) - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105) - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136) - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140) - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142) - chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196) - chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490) - chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301) - chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 (#9764) - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901) - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.4 to 2.1.5 (#9763) - chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274) - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443) - chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597) - chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990) - chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group