Skip to content

Include local DB version information in JSON output #10076

@knqyf263

Description

@knqyf263

Description

The JSON output should include local database version information (vulnerability DB, Java DB, check bundle metadata) regardless of whether running in standalone or client/server mode.

This complements #10074 (server version info) and addresses the full request from the original discussion.

Expected Behavior

The JSON output should include:

{
  "Trivy": {
    "Version": "0.50.0",
    "VulnerabilityDB": {
      "Version": 2,
      "UpdatedAt": "2024-01-01T00:00:00Z",
      "NextUpdate": "2024-01-02T00:00:00Z",
      "DownloadedAt": "2024-01-01T12:00:00Z"
    },
    "JavaDB": { ... },
    "CheckBundle": { ... }
  }
}

This information is important for:

  • Assessment teams to verify scans are performed with current vulnerability databases
  • Compliance scans requiring up-to-date databases
  • Organizations tracking database freshness for monthly scan requirements

Related Discussion

#9400

Related Issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/featureCategorizes issue or PR as related to a new feature.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions