Trivy v0.71.0, released on 2026-06-01 by Aqua Security, is a minor update focusing on performance and security enhancements. This version introduces significant new capabilities and addresses various issues, making it a valuable update for security and QA professionals.
Key Changes
This release brings several notable improvements:
- New Features: Trivy now supports vulnerability detection for .NET applications, expanding its scanning capabilities to a wider range of technologies. Additionally, it includes support for CycloneDX 1.6, enhancing SBOM (Software Bill of Materials) generation and compatibility.
- Performance Improvements: The update delivers optimized scan performance for specific file types and improves the efficiency of database updates. This results in faster operations and reduced resource consumption.
- Bug Fixes: Numerous bugs have been resolved across different modules. These fixes address issues related to database corruption during updates, failures in scanning certain images, incorrect report outputs, crashes when scanning specific files, and improved detection of secrets and misconfigurations. These corrections contribute to greater stability and accuracy.
For a detailed list of changes, refer to the official Trivy v0.71.0 changelog.
Impact for QA Teams
QA teams benefit from Trivy v0.71.0 through expanded security coverage, especially for .NET projects. Faster scan times and more reliable vulnerability detection improve the efficiency of security testing workflows. The bug fixes ensure more accurate and consistent results, reducing false positives and improving overall test reliability.
