Photon OS¶
Trivy supports the following scanners for OS packages.
| Scanner | Supported |
|---|---|
| SBOM | ✓ |
| Vulnerability | ✓ |
| License | ✓ |
Please see here for supported versions.
The table below outlines the features offered by Trivy.
| Feature | Supported |
|---|---|
| Unfixed vulnerabilities | - |
| Dependency graph | ✓ |
SBOM¶
Trivy detects packages that have been installed through package managers such as tdnf and yum.
Vulnerability¶
Photon OS offers its own security advisories, and these are utilized when scanning Photon OS for vulnerabilities.
Data Source¶
See here.
Fixed Version¶
Trivy takes fixed versions from Photon CVE metadata.
Severity¶
Trivy determines the severity of vulnerabilities based on the CVSSv3 score provided by Photon OS. See here for the conversion table from CVSS score to severity.
Status¶
Trivy supports the following vulnerability statuses for Photon OS.
| Status | Supported |
|---|---|
| Fixed | ✓ |
| Affected | ✓ |
| Under Investigation | |
| Will Not Fix | |
| Fix Deferred | |
| End of Life |
License¶
Trivy identifies licenses by examining the metadata of RPM packages.