v0.70.0
2026-04-18T08:52:00Z•6cdcd802aac538dd2e4b0cb5edbbfc7afbc7eade9b7ba8d35b2a6112e02ca695
changelogcloudflare-circldebdependency-updatego-gitgpg-keyopentelemetrypackage-signingreleaserepositoryrpmtrivyv0.70.0
What happened
Aqua Security released Trivy v0.70.0 (2026-04-17) with an announcement and changelog; notably the GPG key used for their deb/rpm package repositories was updated and users should refresh their package signing key. Prior interim releases (v0.69.0–v0.69.3 and v0.68.x/v0.67.x) contain routine release updates and dependency bumps (e.g., github.com/go-git/go-git/v5, go.opentelemetry.io/otel/sdk, github.com/cloudflare/circl) backported into release branches.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- aquasecurity_trivy_releases
- Record identifier
- 6cdcd802aac538dd2e4b0cb5edbbfc7afbc7eade9b7ba8d35b2a6112e02ca695
- Enrichment time
- 2026-04-18T08:52:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.