Skip to content

Replace deprecated microscanner with Trivy security scanner#371

Draft
Copilot wants to merge 3 commits intomainfrom
copilot/fix-263
Draft

Replace deprecated microscanner with Trivy security scanner#371
Copilot wants to merge 3 commits intomainfrom
copilot/fix-263

Conversation

Copy link
Copy Markdown

Copilot AI commented Aug 28, 2025

This PR updates the multi-stage scanning example to use Trivy instead of the deprecated Aqua Microscanner, providing a modern and actively maintained security scanning solution for Node.js Docker containers.

What Changed

multi-stage-scanning/Dockerfile: Replaced the entire microscanner implementation (Stage 5) with a comprehensive Trivy setup that:

  • Downloads and installs Trivy v0.35.0 with multi-architecture support
  • Performs filesystem vulnerability scanning with HIGH and CRITICAL severity filtering
  • Eliminates the need for API tokens (MICROSCANNER_TOKEN no longer required)
  • Uses platform-appropriate installation methods for Alpine Linux

New Documentation: Added multi-stage-scanning/README.md explaining:

  • Why microscanner was deprecated and replaced with Trivy
  • How to use the updated scanning example
  • Build instructions for different stages
  • Compatibility notes about the Node.js 10 base image

Enhanced Documentation: Updated ultimate-node-dockerfile/README.md to emphasize Trivy as the modern replacement for microscanner with improved language and links.

Why This Matters

Aqua Microscanner has been deprecated for several years, leaving users with an outdated security scanning tool. Trivy provides:

  • Active maintenance and regular updates
  • Better vulnerability detection capabilities
  • No API token requirements
  • Superior performance and reliability
  • Multi-platform architecture support

Example Usage

# Build and run security scan
docker build --target audit -t scanning-example:audit .

# Build production image  
docker build --target prod -t scanning-example:prod .

The Trivy implementation scans for HIGH and CRITICAL vulnerabilities and continues the build process even if issues are found, maintaining the same behavior as the original microscanner setup.

Fixes #263.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copy link
Copy Markdown
Author

Copilot AI commented Aug 28, 2025

@BretFisher 👋 This repository doesn't have Copilot instructions. With Copilot instructions, I can understand the repository better, work faster and produce higher quality PRs.

I can generate a .github/copilot-instructions.md file for you automatically. Click here to open a pre-filled issue and assign it to me. I'll write the instructions, and then tag you for review.

Copilot AI and others added 2 commits August 28, 2025 18:56
Co-authored-by: BretFisher <792287+BretFisher@users.noreply.github.com>
Co-authored-by: BretFisher <792287+BretFisher@users.noreply.github.com>
Copilot AI changed the title [WIP] Replace microscanner with Trivy Replace deprecated microscanner with Trivy security scanner Aug 28, 2025
Copilot AI requested a review from BretFisher August 28, 2025 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Replace microscanner with Trivy

2 participants