# Trivy v0.71.1

- Product: Trivy (https://whatsnew.fyi/product/trivy)
- Vendor: Aqua Security
- Date: 2026-06-15
- Version: v0.71.1
- Original notes: https://github.com/aquasecurity/trivy/releases/tag/v0.71.1
- Permalink: https://whatsnew.fyi/product/trivy/releases/v0.71.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Validate artifact filename in OCI
- **fixed** — Forward ospkg detector options through ospkg.NewScanner
- **fixed** — Load VEX documents from within the repository directory
- **fixed** — Surface the original analysis error instead of context cancellation

##### Changelog
* 164b383121351c2d49c5d354c2245719d972752b release: v0.71.1 [release/v0.71] (#10818)
* a72d9a4d997c25fbb6534e231b4e206c9b202b31 fix(oci): validate artifact filename
* 3dd98471dfbbc4a95edd5cd866468d3a8c87fd17 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
* a62cbe40a240d3a3f568401b8a5f86e14114e371 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
* 43d1d2628725e913db110b89419f0bebd36f58a8 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
* ac7696c7b50d633183ce2ff44898d4b5c6eae565 ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)