aquasecurity/trivy

feat(maven): add `mirrors` support for settings.xml files

Closed

#9989 opened on Dec 25, 2025

View on GitHub
 (3 comments) (1 reaction) (1 assignee)Go (35,000 stars) (371 forks)batch import
help wantedkind/feature

Description

Description

We have already added repository retrieval from the profiles field. But Trivy should also check mirrors.

    <mirrors>
        <mirror>
            <id>mycompany-maven-central-mirror</id>
            <name>mycompany-maven-central-mirror</name>
            <url>https://mycompany.example.com/repository/maven-central-mirror</url>
            <mirrorOf>central</mirrorOf>
        </mirror>
    </mirrors>

Contributor guide

Tech stack
Domain
Issue type
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Prerequisites
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
Research direction