diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e5e510d9d3ad..8f1dfd40939e 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1 +1 @@
-{".":"0.53.0"}
+{".":"0.54.0"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fccfdbb410c7..39252cce9eb3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,253 @@
 # Changelog
 
+## [0.54.0](https://github.com/knqyf263/trivy/compare/v0.53.0...v0.54.0) (2024-07-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **k8s:** node-collector dynamic commands support ([#6861](https://github.com/knqyf263/trivy/issues/6861))
+* add clean subcommand ([#6993](https://github.com/knqyf263/trivy/issues/6993))
+* **aws:** Remove aws subcommand ([#6995](https://github.com/knqyf263/trivy/issues/6995))
+
+### Features
+
+* add `log.FilePath()` function for logger ([#7080](https://github.com/knqyf263/trivy/issues/7080)) ([1f5f348](https://github.com/knqyf263/trivy/commit/1f5f34895823fae81bf521fc939bee743a50e304))
+* add clean subcommand ([#6993](https://github.com/knqyf263/trivy/issues/6993)) ([8d0ae1f](https://github.com/knqyf263/trivy/commit/8d0ae1f5de72d92a043dcd6b7c164d30e51b6047))
+* Add flag to configure node-collector image ref ([#5710](https://github.com/knqyf263/trivy/issues/5710)) ([2569575](https://github.com/knqyf263/trivy/commit/256957523a9b4565f814f7e3f349fb76aeda10a4))
+* add info log message about dev deps suppression ([#6211](https://github.com/knqyf263/trivy/issues/6211)) ([7cb6c02](https://github.com/knqyf263/trivy/commit/7cb6c02a4e2ad1c632a70804111a5048d1c0d1f6))
+* Add Julia language analyzer support ([#5635](https://github.com/knqyf263/trivy/issues/5635)) ([fecafb1](https://github.com/knqyf263/trivy/commit/fecafb1fc5bb129c7485342a0775f0dd8bedd28e))
+* Add local ImageID to SARIF metadata ([#6522](https://github.com/knqyf263/trivy/issues/6522)) ([f144e91](https://github.com/knqyf263/trivy/commit/f144e912d34234f00b5a13b7a11a0019fa978b27))
+* add memory cache backend ([#7048](https://github.com/knqyf263/trivy/issues/7048)) ([55ccd06](https://github.com/knqyf263/trivy/commit/55ccd06df43f6ff28685f46d215ccb70f55916d2))
+* add relationships ([#6563](https://github.com/knqyf263/trivy/issues/6563)) ([6343e4f](https://github.com/knqyf263/trivy/commit/6343e4fc7112d0e8709d9ad4690b203509ee19ed))
+* add support `environment.yaml` files ([#6569](https://github.com/knqyf263/trivy/issues/6569)) ([e3bef02](https://github.com/knqyf263/trivy/commit/e3bef02018208057f0d840b01f12e6867b0cc1ff))
+* add support for plugin index ([#6674](https://github.com/knqyf263/trivy/issues/6674)) ([26faf8f](https://github.com/knqyf263/trivy/commit/26faf8f3f04b1c5f9f81c03ffc6b2008732207e2))
+* add ubuntu 23.10 and 24.04 support ([#6573](https://github.com/knqyf263/trivy/issues/6573)) ([4369a19](https://github.com/knqyf263/trivy/commit/4369a19af771f81df141530bacdc8680e7120ac7))
+* allow end-users to adjust K8S client QPS and burst ([#5910](https://github.com/knqyf263/trivy/issues/5910)) ([2c9d7c6](https://github.com/knqyf263/trivy/commit/2c9d7c6b50e01358169089ae5010ef1d84f104bb))
+* **aws:** apply filter options to result ([#6367](https://github.com/knqyf263/trivy/issues/6367)) ([09e37b7](https://github.com/knqyf263/trivy/commit/09e37b7c67664ca28923d392dc33fb1ca2600d35))
+* **aws:** quiet flag support ([#6331](https://github.com/knqyf263/trivy/issues/6331)) ([87a9aa6](https://github.com/knqyf263/trivy/commit/87a9aa60d13a7263e9fa4be01ec8693e17c9d4e3))
+* **aws:** Remove aws subcommand ([#6995](https://github.com/knqyf263/trivy/issues/6995)) ([979e118](https://github.com/knqyf263/trivy/commit/979e118a9e0ca8943bef9143f492d7eb1fd4d863))
+* **c:** add license support for conan lock files ([#6329](https://github.com/knqyf263/trivy/issues/6329)) ([5dd9bd4](https://github.com/knqyf263/trivy/commit/5dd9bd47010366d2665ba70a81c2cd61c6ff6c41))
+* **cloudformation:** add support for logging and endpoint access for EKS ([#6440](https://github.com/knqyf263/trivy/issues/6440)) ([86714bf](https://github.com/knqyf263/trivy/commit/86714bf6bf40ea3e3c0cbc6d1c9d0a11bb5834bf))
+* **cloudformation:** inline ignore support for YAML templates ([#6358](https://github.com/knqyf263/trivy/issues/6358)) ([df024e8](https://github.com/knqyf263/trivy/commit/df024e88ddccc0bd9158e7a4a553983438399826))
+* **conda:** add licenses support for `environment.yml` files ([#6953](https://github.com/knqyf263/trivy/issues/6953)) ([654217a](https://github.com/knqyf263/trivy/commit/654217a65485ca0a07771ea61071977894eb4920))
+* **dart:** use first version of constraint for dependencies using SDK version ([#6239](https://github.com/knqyf263/trivy/issues/6239)) ([042d6b0](https://github.com/knqyf263/trivy/commit/042d6b08c283105c258a3dda98983b345a5305c3))
+* filter k8s core components vuln results ([#5713](https://github.com/knqyf263/trivy/issues/5713)) ([0ff5f96](https://github.com/knqyf263/trivy/commit/0ff5f96bb76ed9bec438f73ade2b1249a9025b16))
+* **go:** add main module ([#6574](https://github.com/knqyf263/trivy/issues/6574)) ([2d090ef](https://github.com/knqyf263/trivy/commit/2d090ef2df7966ada7178b4b88179498ad7e1f2b))
+* **go:** parse main mod version from build info settings ([#6564](https://github.com/knqyf263/trivy/issues/6564)) ([419e3d2](https://github.com/knqyf263/trivy/commit/419e3d2023aa190ff62c3952219053a9bca066bb))
+* **go:** parse main module of go binary files ([#6530](https://github.com/knqyf263/trivy/issues/6530)) ([e32215c](https://github.com/knqyf263/trivy/commit/e32215c99d4ccda754adf46dffb5ae062a4a142b))
+* **image:** customer podman host or socket option ([#6256](https://github.com/knqyf263/trivy/issues/6256)) ([9d2057a](https://github.com/knqyf263/trivy/commit/9d2057a7c2029d259f8ee40e84a37a90b6ba7136))
+* **image:** goversion as stdlib ([#6277](https://github.com/knqyf263/trivy/issues/6277)) ([d82d6cb](https://github.com/knqyf263/trivy/commit/d82d6cb73133a25e5c3f6e8d501cb2ac6512dc45))
+* **image:** Set User-Agent header for Trivy container registry requests ([#6868](https://github.com/knqyf263/trivy/issues/6868)) ([9b31697](https://github.com/knqyf263/trivy/commit/9b31697274c8743d6e5a8f7a1a05daf60cd15910))
+* introduce package UIDs for improved vulnerability mapping ([#6583](https://github.com/knqyf263/trivy/issues/6583)) ([998f750](https://github.com/knqyf263/trivy/commit/998f750432a91e1e1832d507e66aab77d02449f9))
+* **java:** add dependency location support for `gradle` files ([#6083](https://github.com/knqyf263/trivy/issues/6083)) ([535b5a9](https://github.com/knqyf263/trivy/commit/535b5a96d948b6ca64ed8ae85ccd26b11fa0137a))
+* **java:** add support for `maven-metadata.xml` files for remote snapshot repositories. ([#6950](https://github.com/knqyf263/trivy/issues/6950)) ([1f8fca1](https://github.com/knqyf263/trivy/commit/1f8fca1fc77b989bb4e3ba820b297464dbdd825f))
+* **java:** add support for fetching packages from repos mentioned in pom.xml ([#6171](https://github.com/knqyf263/trivy/issues/6171)) ([ce81c05](https://github.com/knqyf263/trivy/commit/ce81c05851f9457cd316f6af70cf3a33dd657b2d))
+* **java:** add support for line numbers for pom.xml files ([#5991](https://github.com/knqyf263/trivy/issues/5991)) ([b4b90cf](https://github.com/knqyf263/trivy/commit/b4b90cfe202138844a27110e9136859cbc20285c))
+* **java:** add support for sbt projects using sbt-dependency-lock ([#6882](https://github.com/knqyf263/trivy/issues/6882)) ([f18d035](https://github.com/knqyf263/trivy/commit/f18d035ae13b281c96aa4ed69ca32e507d336e66))
+* **java:** add support licenses and graph for gradle lock files ([#6140](https://github.com/knqyf263/trivy/issues/6140)) ([f6c5d58](https://github.com/knqyf263/trivy/commit/f6c5d5800166f1686403e0799cc7a330eb6197a7))
+* **java:** mark dependencies from `maven-invoker-plugin` integration tests pom.xml files as `Dev` ([#6213](https://github.com/knqyf263/trivy/issues/6213)) ([617c3e3](https://github.com/knqyf263/trivy/commit/617c3e31bd0fd1b386e3734ef02badc0aed130f4))
+* **k8s:** node-collector dynamic commands support ([#6861](https://github.com/knqyf263/trivy/issues/6861)) ([8d618e4](https://github.com/knqyf263/trivy/commit/8d618e48a2f1b60c2e4c49cdd9deb8eb45c972b0))
+* **k8s:** rancher rke2 version support ([#5988](https://github.com/knqyf263/trivy/issues/5988)) ([cf0f0d0](https://github.com/knqyf263/trivy/commit/cf0f0d00c23744d6ed9e9a9494e9095898f888ae))
+* **misconf:** Add `--misconfig-scanners` option ([#5670](https://github.com/knqyf263/trivy/issues/5670)) ([b5874e3](https://github.com/knqyf263/trivy/commit/b5874e3ad38e77ac86eedd7a65785b2933f3685f))
+* **misconf:** add helm-api-version and helm-kube-version flag ([#6332](https://github.com/knqyf263/trivy/issues/6332)) ([53517d6](https://github.com/knqyf263/trivy/commit/53517d622b94f5ef2be467fdfa97b73438027362))
+* **misconf:** add metadata to Cloud schema ([#6831](https://github.com/knqyf263/trivy/issues/6831)) ([02d5404](https://github.com/knqyf263/trivy/commit/02d540478d495416b50d7e8b187ff9f5bba41f45))
+* **misconf:** Add support for `--cf-params` for CFT ([#5507](https://github.com/knqyf263/trivy/issues/5507)) ([e3c28f8](https://github.com/knqyf263/trivy/commit/e3c28f8ee37c5c124135e94bf550beb40dbe7112))
+* **misconf:** add support for AWS::EC2::SecurityGroupIngress/Egress ([#6755](https://github.com/knqyf263/trivy/issues/6755)) ([55fa610](https://github.com/knqyf263/trivy/commit/55fa6109cd0463fd3221aae41ca7b1d8c44ad430))
+* **misconf:** Add support for deprecating a check ([#6664](https://github.com/knqyf263/trivy/issues/6664)) ([88702cf](https://github.com/knqyf263/trivy/commit/88702cfd5918b093defc5b5580f7cbf16f5f2417))
+* **misconf:** add support for wildcard ignores ([#6414](https://github.com/knqyf263/trivy/issues/6414)) ([8dd0fcd](https://github.com/knqyf263/trivy/commit/8dd0fcd61b37690f800f9aac6b5c95aec2bb6a65))
+* **misconf:** add support of buildkit instructions when building dockerfile from image config ([#5990](https://github.com/knqyf263/trivy/issues/5990)) ([adfde63](https://github.com/knqyf263/trivy/commit/adfde63d00ec0b7e6a3ceb42aa291bf0d12d13db))
+* **misconf:** add Terraform 'removed' block to schema ([#6640](https://github.com/knqyf263/trivy/issues/6640)) ([b7a0a13](https://github.com/knqyf263/trivy/commit/b7a0a131a03ed49c08d3b0d481bc9284934fd6e1))
+* **misconf:** API Gateway V1 support for CloudFormation ([#6874](https://github.com/knqyf263/trivy/issues/6874)) ([8491469](https://github.com/knqyf263/trivy/commit/8491469f0b35bd9df706a433669f5b62239d4ef3))
+* **misconf:** Expose misconf engine debug logs with `--debug` option ([#5550](https://github.com/knqyf263/trivy/issues/5550)) ([1336223](https://github.com/knqyf263/trivy/commit/13362233c8d3ea54f4b28613a2e7198539eb5c50))
+* **misconf:** loading embedded checks as a fallback ([#6502](https://github.com/knqyf263/trivy/issues/6502)) ([12ec0df](https://github.com/knqyf263/trivy/commit/12ec0dfe9ebfc746bdd1db0956055cfea600450f))
+* **misconf:** register builtin Rego funcs from trivy-checks ([#6616](https://github.com/knqyf263/trivy/issues/6616)) ([7c22ee3](https://github.com/knqyf263/trivy/commit/7c22ee3df5ee51beb90e44428a99541b3d19ab98))
+* **misconf:** resolve tf module from OpenTofu compatible registry ([#6743](https://github.com/knqyf263/trivy/issues/6743)) ([ac74520](https://github.com/knqyf263/trivy/commit/ac7452009bf7ca0fa8ee1de8807c792eabad405a))
+* **misconf:** support for VPC resources for inbound/outbound rules ([#6779](https://github.com/knqyf263/trivy/issues/6779)) ([349caf9](https://github.com/knqyf263/trivy/commit/349caf96bc3dd81551d488044f1adfdb947f39fb))
+* **misconf:** support of selectors for all providers for Rego ([#6905](https://github.com/knqyf263/trivy/issues/6905)) ([bc3741a](https://github.com/knqyf263/trivy/commit/bc3741ae2c68cdd00fc0aef7e51985568b2eb78a))
+* **misconf:** Support private registries for misconf check bundle ([#6327](https://github.com/knqyf263/trivy/issues/6327)) ([f23ed77](https://github.com/knqyf263/trivy/commit/f23ed7759802391b33d957e21334e661f3bb92ae))
+* **misconf:** support symlinks inside of Helm archives ([#6621](https://github.com/knqyf263/trivy/issues/6621)) ([4eae37c](https://github.com/knqyf263/trivy/commit/4eae37c52b035b3576361c12f70d3d9517d0a73c))
+* **misconf:** Use updated terminology for misconfiguration checks ([#6476](https://github.com/knqyf263/trivy/issues/6476)) ([37da98d](https://github.com/knqyf263/trivy/commit/37da98df45f6014fcd5f1744e2e26351b61d2a02))
+* **nodejs:** add v9 pnpm lock file support ([#6617](https://github.com/knqyf263/trivy/issues/6617)) ([1e08648](https://github.com/knqyf263/trivy/commit/1e0864842e32a709941d4b4e8f521602bcee684d))
+* **nodejs:** add yarn alias support ([#5818](https://github.com/knqyf263/trivy/issues/5818)) ([30eff9c](https://github.com/knqyf263/trivy/commit/30eff9c83e4c06eaadb5c1f09d89d08c01014d79))
+* Packagesprops support ([#5605](https://github.com/knqyf263/trivy/issues/5605)) ([16b757d](https://github.com/knqyf263/trivy/commit/16b757d180426809bba126690fe73c9472e37dcb))
+* **php:** add installed.json file support ([#4865](https://github.com/knqyf263/trivy/issues/4865)) ([edc556b](https://github.com/knqyf263/trivy/commit/edc556b85e3554c31e19b1ece189effb9ba2be12))
+* **plugin:** add support for nested archives ([#6845](https://github.com/knqyf263/trivy/issues/6845)) ([622c67b](https://github.com/knqyf263/trivy/commit/622c67b7647f94d0a0ca3acf711d8f847cdd8d98))
+* **plugin:** specify plugin version ([#6683](https://github.com/knqyf263/trivy/issues/6683)) ([d6dc567](https://github.com/knqyf263/trivy/commit/d6dc56732babbc9d7f788c280a768d8648aa093d))
+* **python:** add license support for `requirement.txt` files ([#6782](https://github.com/knqyf263/trivy/issues/6782)) ([29615be](https://github.com/knqyf263/trivy/commit/29615be85e8bfeaf5a0cd51829b1898c55fa4274))
+* **python:** add line number support for `requirement.txt` files ([#6729](https://github.com/knqyf263/trivy/issues/6729)) ([2bc54ad](https://github.com/knqyf263/trivy/commit/2bc54ad2752aba5de4380cb92c13b09c0abefd73))
+* **python:** parse licenses from dist-info folder ([#4724](https://github.com/knqyf263/trivy/issues/4724)) ([df3e90a](https://github.com/knqyf263/trivy/commit/df3e90af8f70c5ee11aa984ddade806036fc63c3))
+* **report:** Include licenses and secrets filtered by rego to ModifiedFindings ([#6483](https://github.com/knqyf263/trivy/issues/6483)) ([fa3cf99](https://github.com/knqyf263/trivy/commit/fa3cf993eace4be793f85907b42365269c597b91))
+* **report:** output plugin ([#4863](https://github.com/knqyf263/trivy/issues/4863)) ([99c04c4](https://github.com/knqyf263/trivy/commit/99c04c438372a486d2365c6052d20016fc484771))
+* **report:** support for filtering licenses and secrets via rego policy files ([#6004](https://github.com/knqyf263/trivy/issues/6004)) ([c6844a7](https://github.com/knqyf263/trivy/commit/c6844a73f19dd1908d50cd5dd801ff3059dfa998))
+* respect custom exit code from plugin ([#6584](https://github.com/knqyf263/trivy/issues/6584)) ([f0961d5](https://github.com/knqyf263/trivy/commit/f0961d54f6d68324003419f65042d15d5435d28b))
+* **rust:** Support workspace.members parsing for Cargo.toml analysis ([#5285](https://github.com/knqyf263/trivy/issues/5285)) ([5924c02](https://github.com/knqyf263/trivy/commit/5924c021da7fba7e937cff6332ebf9ca317ebf80))
+* **sbom:** migrate to `CycloneDX v1.6` ([#6903](https://github.com/knqyf263/trivy/issues/6903)) ([09e50ce](https://github.com/knqyf263/trivy/commit/09e50ce6a82073ba62f1732d5aa0cd2701578693))
+* **sbom:** Support license detection for SBOM scan ([#6072](https://github.com/knqyf263/trivy/issues/6072)) ([eb3ceb3](https://github.com/knqyf263/trivy/commit/eb3ceb323d2646fceecc4e3c18f13eecb3081c0f))
+* **secret:** add support of GitHub fine-grained tokens ([#5740](https://github.com/knqyf263/trivy/issues/5740)) ([be1c554](https://github.com/knqyf263/trivy/commit/be1c55497f863c13dd92e6b8ca3980678ddf707a))
+* **secret:** added support of Docker registry credentials ([#5720](https://github.com/knqyf263/trivy/issues/5720)) ([108a5b0](https://github.com/knqyf263/trivy/commit/108a5b05ced7967ad9fcbfc3768f57d0c45ef7de))
+* **secret:** Support for detecting Hugging Face Access Tokens ([#6236](https://github.com/knqyf263/trivy/issues/6236)) ([6639911](https://github.com/knqyf263/trivy/commit/66399116627afbaa936da3965e25c2afb409c112))
+* set InstalledFiles for DEB and RPM packages ([#5488](https://github.com/knqyf263/trivy/issues/5488)) ([44d0b28](https://github.com/knqyf263/trivy/commit/44d0b28ada21d5f6ab206b61c9c3899f74b890a9))
+* support `--skip-images` scanning flag ([#6334](https://github.com/knqyf263/trivy/issues/6334)) ([e739ab8](https://github.com/knqyf263/trivy/commit/e739ab85063c82a817cdf33130d7dd1ca9ddb65a))
+* **terraform:** Add hyphen and non-ASCII support for domain names in credential extraction ([#6108](https://github.com/knqyf263/trivy/issues/6108)) ([4a9ac6d](https://github.com/knqyf263/trivy/commit/4a9ac6d1995b6a81d8d0e0f7b606940a1b6264f9))
+* **terraform:** ignore resources by nested attributes ([#6302](https://github.com/knqyf263/trivy/issues/6302)) ([29dee32](https://github.com/knqyf263/trivy/commit/29dee32814729f8ba2382f975582d1dbd092cf5c))
+* **terraform:** Terraform Plan snapshot scanning support ([#6176](https://github.com/knqyf263/trivy/issues/6176)) ([9361cdb](https://github.com/knqyf263/trivy/commit/9361cdb7e28fd304d6fd2a1091feac64a6786672))
+* **vex:** add PURL matching for CSAF VEX ([#5890](https://github.com/knqyf263/trivy/issues/5890)) ([d0c81e2](https://github.com/knqyf263/trivy/commit/d0c81e23c4bf83923ac0a3218b70fc34679ddb9f))
+* **vex:** Add support for CSAF format ([#5535](https://github.com/knqyf263/trivy/issues/5535)) ([c47ed0d](https://github.com/knqyf263/trivy/commit/c47ed0d816a8bedbfbef86b634790d604e623e43))
+* **vex:** consider root component for relationships ([#6313](https://github.com/knqyf263/trivy/issues/6313)) ([c4022d6](https://github.com/knqyf263/trivy/commit/c4022d61b39a4f4139f01f6254f182ab81d2bc35))
+* **vex:** improve relationship support in CSAF VEX ([#6735](https://github.com/knqyf263/trivy/issues/6735)) ([a447f6b](https://github.com/knqyf263/trivy/commit/a447f6ba94b6f8b14177dc5e4369a788e2020d90))
+* **vex:** support non-root components for products in OpenVEX ([#6728](https://github.com/knqyf263/trivy/issues/6728)) ([9515695](https://github.com/knqyf263/trivy/commit/9515695d45e9b5c20890e27e21e3ab45bfd4ce5f))
+* **vuln:** enable `--vex` for all targets ([#5992](https://github.com/knqyf263/trivy/issues/5992)) ([e2eb70e](https://github.com/knqyf263/trivy/commit/e2eb70ecb8e06da819c5447aaf51713c605f7f3f))
+* **vuln:** Handle scanning conan v2.x lockfiles ([#6357](https://github.com/knqyf263/trivy/issues/6357)) ([29b8faf](https://github.com/knqyf263/trivy/commit/29b8faf5faaa02e463cbb54465563b40d5667bf4))
+* **vuln:** ignore vulnerabilities by PURL ([#6178](https://github.com/knqyf263/trivy/issues/6178)) ([cd3e4bc](https://github.com/knqyf263/trivy/commit/cd3e4bcac235c30c144f440a11d568df68f0c6b5))
+* **vuln:** include pkg identifier on detected vulnerabilities ([#5439](https://github.com/knqyf263/trivy/issues/5439)) ([1f0d629](https://github.com/knqyf263/trivy/commit/1f0d6290c33c95d5f213cc409a0ff6a53a2c888e))
+* **vuln:** remove duplicates in Fixed Version ([#5596](https://github.com/knqyf263/trivy/issues/5596)) ([a54d1e9](https://github.com/knqyf263/trivy/commit/a54d1e95fdfa1eaff0b854c6017035001ef4fef0))
+* **vuln:** show suppressed vulnerabilities in table ([#6084](https://github.com/knqyf263/trivy/issues/6084)) ([3c1601b](https://github.com/knqyf263/trivy/commit/3c1601b6cb3df3a2a6a30b086d964ad275438c4c))
+
+
+### Bug Fixes
+
+* add color for error inside of log message ([#6493](https://github.com/knqyf263/trivy/issues/6493)) ([cfddfb3](https://github.com/knqyf263/trivy/commit/cfddfb33c1b9bd7128b78079c298f3417e1fbe34))
+* add context to target finding on k8s table view ([#6099](https://github.com/knqyf263/trivy/issues/6099)) ([1b7e474](https://github.com/knqyf263/trivy/commit/1b7e47424b9f48c9fe194ab24b1d4ccdc7a1a005))
+* **alpine:** Add EOL support for alpine 3.19. ([#5938](https://github.com/knqyf263/trivy/issues/5938)) ([260aa28](https://github.com/knqyf263/trivy/commit/260aa281f4616b3b4b711dbad6f5d1979e5d6488))
+* **alpine:** exclude empty licenses for apk packages ([#6130](https://github.com/knqyf263/trivy/issues/6130)) ([aadbad1](https://github.com/knqyf263/trivy/commit/aadbad1d7827cd1af955ce654e943609e05f1745))
+* **amazon:** check only major version of AL to find advisories ([#6295](https://github.com/knqyf263/trivy/issues/6295)) ([fb8c516](https://github.com/knqyf263/trivy/commit/fb8c516ded3f1fa38efbd9cfc54d3cf5c63f2491))
+* **amazon:** save system files for pkgs containing `amzn` in src ([#5951](https://github.com/knqyf263/trivy/issues/5951)) ([fbc1a83](https://github.com/knqyf263/trivy/commit/fbc1a83f3258ee6d5cf2327e2c5fb627438df81e))
+* **bitnami:** use a different comparer for detecting vulnerabilities ([#5633](https://github.com/knqyf263/trivy/issues/5633)) ([abf227e](https://github.com/knqyf263/trivy/commit/abf227e06ec205c712f2434a60ca739a8ea4fd50))
+* **c:** don't skip conan files from `file-patterns` and scan `.conan2` cache dir ([#6949](https://github.com/knqyf263/trivy/issues/6949)) ([38b35dd](https://github.com/knqyf263/trivy/commit/38b35dd3c804027e7a6e6a9d3c87b7ac333896c5))
+* check returned error before deferring f.Close() ([#6007](https://github.com/knqyf263/trivy/issues/6007)) ([13f797f](https://github.com/knqyf263/trivy/commit/13f797f885ff007901df7c4b42ecd78604582f5a))
+* check unescaped `BomRef` when matching `PkgIdentifier` ([#6025](https://github.com/knqyf263/trivy/issues/6025)) ([6ccc0a5](https://github.com/knqyf263/trivy/commit/6ccc0a554b07b05fd049f882a1825a0e1e0aabe1))
+* clean up golangci lint configuration ([#6797](https://github.com/knqyf263/trivy/issues/6797)) ([62de6f3](https://github.com/knqyf263/trivy/commit/62de6f3feba6e4c56ad3922441d5b0f150c3d6b7))
+* **cli:** always output fatal errors to stderr ([#6827](https://github.com/knqyf263/trivy/issues/6827)) ([c2b9132](https://github.com/knqyf263/trivy/commit/c2b9132a7e933a68df4cc0eb86aab23719ded1b5))
+* **cli:** inconsistent behavior across CLI flags, environment variables, and config files ([#5843](https://github.com/knqyf263/trivy/issues/5843)) ([59e5433](https://github.com/knqyf263/trivy/commit/59e54334d1bd97ec8bbc4b46e1225940f67b2c5a))
+* **cli:** show info message only when --scanners is available ([#7032](https://github.com/knqyf263/trivy/issues/7032)) ([e9fc3e3](https://github.com/knqyf263/trivy/commit/e9fc3e3397564512038ddeca2adce0efcb3f93c5))
+* close APKINDEX archive file ([#6672](https://github.com/knqyf263/trivy/issues/6672)) ([5caf437](https://github.com/knqyf263/trivy/commit/5caf4377f3a7fcb1f6e1a84c67136ae62d100be3))
+* close plugin.yaml ([#6577](https://github.com/knqyf263/trivy/issues/6577)) ([916f6c6](https://github.com/knqyf263/trivy/commit/916f6c66f8031bb311657944ff3ca1284169902e))
+* close pom.xml ([#6507](https://github.com/knqyf263/trivy/issues/6507)) ([a986199](https://github.com/knqyf263/trivy/commit/a9861994e51b45b18880d7432347f9d911148faa))
+* close settings.xml ([#6768](https://github.com/knqyf263/trivy/issues/6768)) ([9c3e895](https://github.com/knqyf263/trivy/commit/9c3e895fcb0852c00ac03ed21338768f76b5273b))
+* close testfile ([#6830](https://github.com/knqyf263/trivy/issues/6830)) ([aa0c413](https://github.com/knqyf263/trivy/commit/aa0c413814e8915b38d2285c6a8ba5bc3f0705b4))
+* **cloudformation:** infer type after resolving a function ([#6406](https://github.com/knqyf263/trivy/issues/6406)) ([6a2f6fd](https://github.com/knqyf263/trivy/commit/6a2f6fde4f97f254eb4ef3b79cab99f574abf72a))
+* **cloudformation:** resolve `DedicatedMasterEnabled` parsing issue ([#6439](https://github.com/knqyf263/trivy/issues/6439)) ([74e4c6e](https://github.com/knqyf263/trivy/commit/74e4c6e0127c5594516ed54c1202213d4f670c8e))
+* **cloudformation:** support of all SSE algorithms for s3 ([#6270](https://github.com/knqyf263/trivy/issues/6270)) ([337cb75](https://github.com/knqyf263/trivy/commit/337cb753533ccb7d14b01bb2ef69d26c9061c708))
+* **conda:** add support `pip` deps for `environment.yml` files ([#6675](https://github.com/knqyf263/trivy/issues/6675)) ([150a773](https://github.com/knqyf263/trivy/commit/150a77313e980cd63797a89a03afcbc97b285f38))
+* **cyclonedx:** fix unmarshal for licenses ([#5828](https://github.com/knqyf263/trivy/issues/5828)) ([b3d516e](https://github.com/knqyf263/trivy/commit/b3d516eafec6a9d4846fc7a9e5f55dd8931ad434))
+* **cyclonedx:** move root component from scanned cyclonedx file to output cyclonedx file ([#6113](https://github.com/knqyf263/trivy/issues/6113)) ([a813506](https://github.com/knqyf263/trivy/commit/a813506f4101ed2df8b93ae43304b654680db91a))
+* **cyclonedx:** trim non-URL info for `advisory.url` ([#6952](https://github.com/knqyf263/trivy/issues/6952)) ([417212e](https://github.com/knqyf263/trivy/commit/417212e0930aa52a27ebdc1b9370d2943ce0f8fa))
+* **db:** check schema version for image name only ([#6410](https://github.com/knqyf263/trivy/issues/6410)) ([8baccd7](https://github.com/knqyf263/trivy/commit/8baccd7909a4b91970f2a8effcfce2628a42c206))
+* **db:** use schema version as tag only for `trivy-db` and `trivy-java-db` registries by default ([#6219](https://github.com/knqyf263/trivy/issues/6219)) ([96bd7ac](https://github.com/knqyf263/trivy/commit/96bd7ac59452160a02adab1c7d43e3e6d9b639ba))
+* **debian:** sort dpkg info before parsing due to exclude directories ([#6551](https://github.com/knqyf263/trivy/issues/6551)) ([9aca98c](https://github.com/knqyf263/trivy/commit/9aca98cca87d037ad756a3dbe61931cd2ddf1fc0))
+* **debian:** take installed files from the origin layer ([#6849](https://github.com/knqyf263/trivy/issues/6849)) ([089b953](https://github.com/knqyf263/trivy/commit/089b953462260f01c40bdf588b2568ae0ef658bc))
+* fix cursor usage in Redis Clear function ([#6056](https://github.com/knqyf263/trivy/issues/6056)) ([2900a21](https://github.com/knqyf263/trivy/commit/2900a21176eca0fdd6d82d16b73f17cf591d0cc6))
+* **fs:** handle default skip dirs properly ([#6628](https://github.com/knqyf263/trivy/issues/6628)) ([8016b82](https://github.com/knqyf263/trivy/commit/8016b821a260840ccb81ef520f2804b9482f3820))
+* **go:** add only non-empty root modules for `gobinaries` ([#6710](https://github.com/knqyf263/trivy/issues/6710)) ([c96f2a5](https://github.com/knqyf263/trivy/commit/c96f2a5b3de820da37e14594dd537c3b0949ae9c))
+* **go:** include only `.version`|`.ver` (no prefixes) ldflags for `gobinaries` ([#6705](https://github.com/knqyf263/trivy/issues/6705)) ([afb4f9d](https://github.com/knqyf263/trivy/commit/afb4f9dc4730671ba004e1734fa66422c4c86dad))
+* Golang version parsing from binaries w/GOEXPERIMENT ([#6696](https://github.com/knqyf263/trivy/issues/6696)) ([696f2ae](https://github.com/knqyf263/trivy/commit/696f2ae0ecdd4f90303f41249924a09ace70dd78))
+* handle non-parsable images names ([#5965](https://github.com/knqyf263/trivy/issues/5965)) ([2212d14](https://github.com/knqyf263/trivy/commit/2212d14432935eda2efd9878eaecff1e8eb4071f))
+* **helm:** scan the subcharts once ([#6382](https://github.com/knqyf263/trivy/issues/6382)) ([f148eb1](https://github.com/knqyf263/trivy/commit/f148eb10f25b4daaf97b38ef523e6f16e9b118a1))
+* ignore no init containers ([#5939](https://github.com/knqyf263/trivy/issues/5939)) ([a3fac90](https://github.com/knqyf263/trivy/commit/a3fac90b473aeafc3f8011ea6e7315f3ce18c56e))
+* **image:** parse `image.inspect.Created` field only for non-empty values ([#6948](https://github.com/knqyf263/trivy/issues/6948)) ([0af5730](https://github.com/knqyf263/trivy/commit/0af5730cbe56686417389c2fad643c1bdbb33999))
+* include packages unless it is not needed ([#6765](https://github.com/knqyf263/trivy/issues/6765)) ([56dbe1f](https://github.com/knqyf263/trivy/commit/56dbe1f6768fe67fbc1153b74fde0f83eaa1b281))
+* increase the default buffer size for scanning dpkg status files by 2 times ([#6298](https://github.com/knqyf263/trivy/issues/6298)) ([3177924](https://github.com/knqyf263/trivy/commit/317792433e4e961441f772c6bd22d63873a8c986))
+* **java:** add only valid libs from `pom.properties` files from `jars` ([#6164](https://github.com/knqyf263/trivy/issues/6164)) ([8221473](https://github.com/knqyf263/trivy/commit/82214736a943f61c173902808f2887a660543fe2))
+* **java:** check if a version exists when determining GAV by file name for `jar` files ([#5630](https://github.com/knqyf263/trivy/issues/5630)) ([37e7e3e](https://github.com/knqyf263/trivy/commit/37e7e3eabf9b788d1f7549d96067d807895a121f))
+* **java:** don't ignore runtime scope for pom.xml files ([#6223](https://github.com/knqyf263/trivy/issues/6223)) ([c4b5ab7](https://github.com/knqyf263/trivy/commit/c4b5ab7881c1538d32d87ac21e67e3586e207cd7))
+* **java:** don't remove excluded deps from upper pom's ([#5838](https://github.com/knqyf263/trivy/issues/5838)) ([7895657](https://github.com/knqyf263/trivy/commit/7895657c89905a5447ca79c71382518907946d16))
+* **java:** parse modules from `pom.xml` files once ([#6312](https://github.com/knqyf263/trivy/issues/6312)) ([7c409fd](https://github.com/knqyf263/trivy/commit/7c409fd270bd71a24da8a06d7be2aa9f5a70321f))
+* **java:** recursive check all nested depManagements with import scope for pom.xml files ([#5982](https://github.com/knqyf263/trivy/issues/5982)) ([729a051](https://github.com/knqyf263/trivy/commit/729a0512abb633a29b6eaa49d224c1fedf389c05))
+* **java:** update logic to detect `pom.xml` file snapshot artifacts from remote repositories ([#6412](https://github.com/knqyf263/trivy/issues/6412)) ([34ab09d](https://github.com/knqyf263/trivy/commit/34ab09d559bf9bee6f39fd8fce10d36fd6759681))
+* k8s friendly error messages kbom non cluster scans ([#5594](https://github.com/knqyf263/trivy/issues/5594)) ([2145464](https://github.com/knqyf263/trivy/commit/214546427e76da21bbc61a5b70ec00d5b95f6d0b))
+* k8s summary separate infra and user finding results ([#6120](https://github.com/knqyf263/trivy/issues/6120)) ([dc76c6e](https://github.com/knqyf263/trivy/commit/dc76c6e4f4df67f5bf01ead2b18e2f98e853ca61))
+* **license:** add FilePath to results to allow for license path filtering via trivyignore file ([#6215](https://github.com/knqyf263/trivy/issues/6215)) ([04535b5](https://github.com/knqyf263/trivy/commit/04535b554ab239b30543ae6514b677d416785ca1))
+* **license:** reorder logic of how python package licenses are acquired ([#6220](https://github.com/knqyf263/trivy/issues/6220)) ([56cedc0](https://github.com/knqyf263/trivy/commit/56cedc0d6795ed34c3fd1a9b10880678c9a709d1))
+* **license:** return license separation using separators  `,`, `or`, etc. ([#6916](https://github.com/knqyf263/trivy/issues/6916)) ([52f7aa5](https://github.com/knqyf263/trivy/commit/52f7aa54b520a90a19736703f8ea63cc20fab104))
+* **misconf:** add an image misconf to result ([#5731](https://github.com/knqyf263/trivy/issues/5731)) ([a5342da](https://github.com/knqyf263/trivy/commit/a5342da0670589f580e8b59a0c2bd42b778df76d))
+* **misconf:** avoid panic if the scheme is not valid ([#6496](https://github.com/knqyf263/trivy/issues/6496)) ([4337068](https://github.com/knqyf263/trivy/commit/433706820834548132f4f1aba41a7208143cfab2))
+* **misconf:** clear location URI for SARIF ([#6405](https://github.com/knqyf263/trivy/issues/6405)) ([712dcd3](https://github.com/knqyf263/trivy/commit/712dcd30077dfdf7a5449d635ee38fff5165c422))
+* **misconf:** do not use semver for parsing tf module versions ([#6614](https://github.com/knqyf263/trivy/issues/6614)) ([9c794c0](https://github.com/knqyf263/trivy/commit/9c794c0ffc8d31c82cad3cbd593eb03e689cf583))
+* **misconf:** don't shift ignore rule related to code ([#6708](https://github.com/knqyf263/trivy/issues/6708)) ([39a746c](https://github.com/knqyf263/trivy/commit/39a746c77837f873e87b81be40676818030f44c5))
+* **misconf:** Escape template value correctly ([#6292](https://github.com/knqyf263/trivy/issues/6292)) ([1c49a16](https://github.com/knqyf263/trivy/commit/1c49a16c65ecc63a24d9957174ca91d088855a2a))
+* **misconf:** fix caching of modules in subdirectories ([#6814](https://github.com/knqyf263/trivy/issues/6814)) ([0bcfedb](https://github.com/knqyf263/trivy/commit/0bcfedbcaa9bbe30ee5ecade5b98e9ce3cc54c9b))
+* **misconf:** fix parsing of engine links and frameworks ([#6937](https://github.com/knqyf263/trivy/issues/6937)) ([ec68c9a](https://github.com/knqyf263/trivy/commit/ec68c9ab4580d057720179173d58734402c92af4))
+* **misconf:** get `user` from `Config.User` ([#6070](https://github.com/knqyf263/trivy/issues/6070)) ([7fec991](https://github.com/knqyf263/trivy/commit/7fec991c58f5d32424f50ee75dfde790b08b4245))
+* **misconf:** handle source prefix to ignore ([#6945](https://github.com/knqyf263/trivy/issues/6945)) ([c3192f0](https://github.com/knqyf263/trivy/commit/c3192f061d7e84eaf38df8df7c879dc00b4ca137))
+* **misconf:** load cached tf modules ([#6607](https://github.com/knqyf263/trivy/issues/6607)) ([7a25dad](https://github.com/knqyf263/trivy/commit/7a25dadb44a57a1099227cde44e1732f25409cea))
+* **misconf:** Parse JSON k8s manifests properly ([#6490](https://github.com/knqyf263/trivy/issues/6490)) ([9b7d713](https://github.com/knqyf263/trivy/commit/9b7d7132b750f3ee0e824179b7fe2ea0cb0916ed))
+* **misconf:** parsing numbers without fraction as int ([#6834](https://github.com/knqyf263/trivy/issues/6834)) ([8141a13](https://github.com/knqyf263/trivy/commit/8141a137ba50b553a9da877d95c7ccb491d041c6))
+* **misconf:** skip Rego errors with a nil location ([#6638](https://github.com/knqyf263/trivy/issues/6638)) ([a2c522d](https://github.com/knqyf263/trivy/commit/a2c522ddb229f049999c4ce74ef75a0e0f9fdc62))
+* **misconf:** skip Rego errors with a nil location ([#6666](https://github.com/knqyf263/trivy/issues/6666)) ([a126e10](https://github.com/knqyf263/trivy/commit/a126e1075a44ef0e40c0dc1e214d1c5955f80242))
+* node-collector high and critical cves ([#6707](https://github.com/knqyf263/trivy/issues/6707)) ([ff32deb](https://github.com/knqyf263/trivy/commit/ff32deb7bf9163c06963f557228260b3b8c161ed))
+* **nodejs:** add local packages support for `pnpm-lock.yaml` files ([#6034](https://github.com/knqyf263/trivy/issues/6034)) ([4e962c0](https://github.com/knqyf263/trivy/commit/4e962c02aa74875a265eb231f44e9ade4fc1a70d))
+* **nodejs:** add name validation for package name from `package.json`  ([#6268](https://github.com/knqyf263/trivy/issues/6268)) ([12c5bf0](https://github.com/knqyf263/trivy/commit/12c5bf0805753c8d68423a06920f184f2fd55772))
+* **nodejs:** add support for parsing `workspaces` from `package.json` as an object ([#6231](https://github.com/knqyf263/trivy/issues/6231)) ([f85c9fa](https://github.com/knqyf263/trivy/commit/f85c9fac6f522d9a5f139e7de9bc7b5037692877))
+* **nodejs:** find licenses for packages with slash ([#5836](https://github.com/knqyf263/trivy/issues/5836)) ([f90d4ee](https://github.com/knqyf263/trivy/commit/f90d4ee436e89fa3806e436bf7549053f4d51b27))
+* **nodejs:** fix infinite loop when package link from `package-lock.json` file is broken ([#6858](https://github.com/knqyf263/trivy/issues/6858)) ([cf5aa33](https://github.com/knqyf263/trivy/commit/cf5aa336e660e4c98481ebf8d15dd4e54c38581e))
+* **nodejs:** fix infinity loops for `pnpm` with cyclic imports ([#6857](https://github.com/knqyf263/trivy/issues/6857)) ([7d083bc](https://github.com/knqyf263/trivy/commit/7d083bc890eccc3bf32765c6d7e922cab2e2ef94))
+* **nodejs:** merge `Indirect`, `Dev`, `ExternalReferences` fields for same deps from `package-lock.json` files v2 or later ([#6356](https://github.com/knqyf263/trivy/issues/6356)) ([258d153](https://github.com/knqyf263/trivy/commit/258d1534614a98811de657eb196051728529defd))
+* **nodejs:** support protocols for dependency section in yarn.lock files ([#5612](https://github.com/knqyf263/trivy/issues/5612)) ([ad977a4](https://github.com/knqyf263/trivy/commit/ad977a4256920d6269e84c82e4f42bbe244a2c5a))
+* **nodejs:** use project dir when searching for workspaces for Yarn.lock files ([#6102](https://github.com/knqyf263/trivy/issues/6102)) ([3ac6388](https://github.com/knqyf263/trivy/commit/3ac63887dc793240390f0c2b8b0f6295953a2efa))
+* **plugin:** initialize logger ([#6836](https://github.com/knqyf263/trivy/issues/6836)) ([728e77a](https://github.com/knqyf263/trivy/commit/728e77a7261dc3fcda1e61e79be066c789bbba0c))
+* **plugin:** respect `--insecure` ([#7022](https://github.com/knqyf263/trivy/issues/7022)) ([3d02a31](https://github.com/knqyf263/trivy/commit/3d02a31b44924f9e2495aae087f7ca9de3314db4))
+* Printf format err ([#6198](https://github.com/knqyf263/trivy/issues/6198)) ([876ab84](https://github.com/knqyf263/trivy/commit/876ab84b364238fbae9b53c9d9676873c6b89b4b))
+* **purl:** add missed os types ([#6955](https://github.com/knqyf263/trivy/issues/6955)) ([2d85a00](https://github.com/knqyf263/trivy/commit/2d85a003b22298d1101f84559f7c6b470f2b3909))
+* **python:** add package name and version validation for `requirements.txt` files. ([#6804](https://github.com/knqyf263/trivy/issues/6804)) ([ea3a124](https://github.com/knqyf263/trivy/commit/ea3a124fc7162c30c7f1a59bdb28db0b3c8bb86d))
+* **python:** compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase ([#6852](https://github.com/knqyf263/trivy/issues/6852)) ([faa9d92](https://github.com/knqyf263/trivy/commit/faa9d92cfeb8d924deda2dac583b6c97099c08d9))
+* **report:** don't include empty strings in `.vulnerabilities[].identifiers[].url` when `gitlab.tpl` is used ([#6348](https://github.com/knqyf263/trivy/issues/6348)) ([1870f28](https://github.com/knqyf263/trivy/commit/1870f28461c0faa9c1cf2a7b1d756356a16af4fc))
+* **report:** don't mark misconfig passed tests as failed in junit.tpl ([#5767](https://github.com/knqyf263/trivy/issues/5767)) ([be5a550](https://github.com/knqyf263/trivy/commit/be5a550491f581311c938f7230b389cb10aacae7))
+* **report:** fix error if miconfigs are empty ([#5782](https://github.com/knqyf263/trivy/issues/5782)) ([c317fe8](https://github.com/knqyf263/trivy/commit/c317fe828d6d2630bad014d4f185037f3b24df2b))
+* **report:** hide empty tables if all vulns has been filtered ([#6352](https://github.com/knqyf263/trivy/issues/6352)) ([3d388d8](https://github.com/knqyf263/trivy/commit/3d388d8552ef42d4d54176309a38c1879008527b))
+* **report:** update Gitlab template ([#5721](https://github.com/knqyf263/trivy/issues/5721)) ([eb97419](https://github.com/knqyf263/trivy/commit/eb9741954ca809407148423c8826e3cb8af4ca19))
+* **report:** use `AWS_REGION` env for secrets in `asff` template ([#6011](https://github.com/knqyf263/trivy/issues/6011)) ([70dd572](https://github.com/knqyf263/trivy/commit/70dd572ef741856502bc369144312e327f947046))
+* **report:** use OS information for OS packages purl in `github` template ([#5783](https://github.com/knqyf263/trivy/issues/5783)) ([6cc00c2](https://github.com/knqyf263/trivy/commit/6cc00c2f0c18901522ed2e32d5b07912bb37b4a3))
+* **report:** use time.Time for CreatedAt ([#5598](https://github.com/knqyf263/trivy/issues/5598)) ([ae4bcf6](https://github.com/knqyf263/trivy/commit/ae4bcf6a063ea212623570e6ac6523db4e046679))
+* **sbom:** add check for `CreationInfo` to nil when detecting SPDX created using Trivy ([#6346](https://github.com/knqyf263/trivy/issues/6346)) ([e866bd5](https://github.com/knqyf263/trivy/commit/e866bd5b5d4a654c13436f516ef9c258a8367e86))
+* **sbom:** change error to warning for multiple OSes ([#6541](https://github.com/knqyf263/trivy/issues/6541)) ([d2d4022](https://github.com/knqyf263/trivy/commit/d2d4022ef36b0ccf583c9bf9436dfd75a742ee3d))
+* **sbom:** don't overwrite `srcEpoch` when decoding SBOM files ([#6866](https://github.com/knqyf263/trivy/issues/6866)) ([04af59c](https://github.com/knqyf263/trivy/commit/04af59c2906bcfc7f7970b4e8f45a90f04313170))
+* **sbom:** fix error when parent of SPDX Relationships is not a package. ([#6399](https://github.com/knqyf263/trivy/issues/6399)) ([5f69937](https://github.com/knqyf263/trivy/commit/5f69937cc6986912925a8a1b0801810ea850ba79))
+* **sbom:** fix panic for `convert` mode when scanning json file derived from sbom file ([#6808](https://github.com/knqyf263/trivy/issues/6808)) ([f92ea09](https://github.com/knqyf263/trivy/commit/f92ea096856c7c262b05bd4d31c62689ebafac82))
+* **sbom:** fix panic when scanning SBOM file without root component into SBOM format ([#7051](https://github.com/knqyf263/trivy/issues/7051)) ([3d4ae8b](https://github.com/knqyf263/trivy/commit/3d4ae8b5be94cd9b00badeece8d86c2258b2cd90))
+* **sbom:** skip executable file analysis if Rekor isn't a specified SBOM source ([#6163](https://github.com/knqyf263/trivy/issues/6163)) ([7694df1](https://github.com/knqyf263/trivy/commit/7694df11fbd04e705383e527b5841fcb9a383cd5))
+* **sbom:** take pkg name from `purl` for maven pkgs ([#7008](https://github.com/knqyf263/trivy/issues/7008)) ([a76e328](https://github.com/knqyf263/trivy/commit/a76e3286c413de3dec55394fb41dd627dfee37ae))
+* **sbom:** use `group` field for pom.xml and nodejs files for CycloneDX reports ([#5922](https://github.com/knqyf263/trivy/issues/5922)) ([c75143f](https://github.com/knqyf263/trivy/commit/c75143f5e82b3cd5c66c94241e51423bce26b936))
+* **sbom:** use `purl` for `bitnami` pkg names ([#6982](https://github.com/knqyf263/trivy/issues/6982)) ([7eabb92](https://github.com/knqyf263/trivy/commit/7eabb92ec2e617300433445718be07ac74956454))
+* **sbom:** use package UIDs for uniqueness ([#7042](https://github.com/knqyf263/trivy/issues/7042)) ([14d71ba](https://github.com/knqyf263/trivy/commit/14d71ba63c39e51dd4179ba2d6002b46e1816e90))
+* **secret:** `Asymmetric Private Key` shouldn't start with space ([#6867](https://github.com/knqyf263/trivy/issues/6867)) ([bb26445](https://github.com/knqyf263/trivy/commit/bb26445e3df198df77930329f532ac5ab7a67af2))
+* **secret:** `AWS Secret Access Key` must include only secrets with `aws` text. ([#5901](https://github.com/knqyf263/trivy/issues/5901)) ([958e1f1](https://github.com/knqyf263/trivy/commit/958e1f11f77076188bcdf0811bbd50be68d0a18b))
+* **secret:** add `sec` and space to secret prefix for `aws-secret-access-key` ([#5647](https://github.com/knqyf263/trivy/issues/5647)) ([8ff574e](https://github.com/knqyf263/trivy/commit/8ff574e3f732e5b94651431591bf18d6d497cf02))
+* **secret:** convert severity for custom rules ([#6500](https://github.com/knqyf263/trivy/issues/6500)) ([46d5aba](https://github.com/knqyf263/trivy/commit/46d5abad42bd4c4b6127d5a5053867728d619098))
+* **secret:** exclude upper case before secret for `alibaba-access-key-id` ([#5618](https://github.com/knqyf263/trivy/issues/5618)) ([b1dc60b](https://github.com/knqyf263/trivy/commit/b1dc60b88523cd4bddc25d5fb77c47e69198cc43))
+* **secret:** find aws secrets ending with a comma or dot ([#5921](https://github.com/knqyf263/trivy/issues/5921)) ([ae134a9](https://github.com/knqyf263/trivy/commit/ae134a9b3884c5fedaad1400863374e2c8c6897e))
+* **server:** add Locations for `Packages` in client/server mode ([#6366](https://github.com/knqyf263/trivy/issues/6366)) ([a2482c1](https://github.com/knqyf263/trivy/commit/a2482c14e12df8e242b83361a9a3379691f65d95))
+* **suse:** Add SLES 15.6 and Leap 15.6 ([#6964](https://github.com/knqyf263/trivy/issues/6964)) ([5ee4e9d](https://github.com/knqyf263/trivy/commit/5ee4e9d30ea814f60fd5705361cabf2e83a47a78))
+* **swift:** try to use branch to resolve version ([#6168](https://github.com/knqyf263/trivy/issues/6168)) ([e787e1a](https://github.com/knqyf263/trivy/commit/e787e1af01c326c339aa0726ccc567e97c1facfa))
+* **terraform:** Attribute and fileset fixes ([#6544](https://github.com/knqyf263/trivy/issues/6544)) ([7c2017f](https://github.com/knqyf263/trivy/commit/7c2017fa7ad43b310ce487072ace269ed72e8c4a))
+* **terraform:** do not re-expand dynamic blocks ([#6151](https://github.com/knqyf263/trivy/issues/6151)) ([64926d8](https://github.com/knqyf263/trivy/commit/64926d8423d1e69ab4bde51f1e59ed56960f9bcb))
+* **terraform:** ensure consistent path handling across OS ([#6161](https://github.com/knqyf263/trivy/issues/6161)) ([327cf88](https://github.com/knqyf263/trivy/commit/327cf88397a12809a7388928d6fc27a7e6bfe66d))
+* **terraform:** eval submodules ([#6411](https://github.com/knqyf263/trivy/issues/6411)) ([13190e9](https://github.com/knqyf263/trivy/commit/13190e92d9fea1277389fc09fba0418c05c5f44f))
+* **terraform:** fix policy document retrieval ([#6276](https://github.com/knqyf263/trivy/issues/6276)) ([102b6df](https://github.com/knqyf263/trivy/commit/102b6df7389f93229dfdb4463bb18986cb7ef432))
+* **terraform:** fix root module search ([#6160](https://github.com/knqyf263/trivy/issues/6160)) ([1dfece8](https://github.com/knqyf263/trivy/commit/1dfece89d0c7c8dec73b6e3be8e7fabf1fca4a39))
+* **terraform:** сhecking SSE encryption algorithm validity ([#6341](https://github.com/knqyf263/trivy/issues/6341)) ([abd62ae](https://github.com/knqyf263/trivy/commit/abd62ae74e6b3d7c785717643bb254ecfef0fdac))
+* trivy k8s avoid deleting non-default node collector namespace  ([#6559](https://github.com/knqyf263/trivy/issues/6559)) ([8e6cd0e](https://github.com/knqyf263/trivy/commit/8e6cd0e917fb54f72ca8054e2d94c3f53f764134))
+* typo ([#6283](https://github.com/knqyf263/trivy/issues/6283)) ([1ba5b59](https://github.com/knqyf263/trivy/commit/1ba5b59527d161b44830700b678229beb302c0ad))
+* typo function name and comment optimization ([#6200](https://github.com/knqyf263/trivy/issues/6200)) ([3d2f583](https://github.com/knqyf263/trivy/commit/3d2f583ecd712d4879d98ca24b9b30fbf540643e))
+* use `0600` perms for tmp files for post analyzers ([#6386](https://github.com/knqyf263/trivy/issues/6386)) ([9d7f5c9](https://github.com/knqyf263/trivy/commit/9d7f5c948e30af7b76cbe32b8e53070fb5bfd16b))
+* use embedded when command path not found ([#7037](https://github.com/knqyf263/trivy/issues/7037)) ([137c916](https://github.com/knqyf263/trivy/commit/137c9164238ffd989a0c5ed24f23a55bbf341f6e))
+* use of specified context to obtain cluster name ([#6645](https://github.com/knqyf263/trivy/issues/6645)) ([39ebed4](https://github.com/knqyf263/trivy/commit/39ebed45f8c218509d264bd3f3ca548fc33d2b3a))
+* **vex:** CSAF filtering should consider relationships ([#5923](https://github.com/knqyf263/trivy/issues/5923)) ([9c5e5a0](https://github.com/knqyf263/trivy/commit/9c5e5a04ee691f0f9ad064bd0cedec3b317f6bd8))
+* **vm:** update ext4-filesystem fix reading groupdescriptor in 32bit mode ([#5888](https://github.com/knqyf263/trivy/issues/5888)) ([0ebb6c4](https://github.com/knqyf263/trivy/commit/0ebb6c46820f682f5c153f0b697b4e6785078edf))
+* **vuln:** skip empty versions ([#6542](https://github.com/knqyf263/trivy/issues/6542)) ([164b025](https://github.com/knqyf263/trivy/commit/164b025413c5fb9c6759491e9a306b46b869be93))
+
+
+### Performance Improvements
+
+* **debian:** use `bytes.Index` in `emptyLineSplit` to cut allocation ([#7065](https://github.com/knqyf263/trivy/issues/7065)) ([acbec05](https://github.com/knqyf263/trivy/commit/acbec053c985388a26d899e73b4b7f5a6d1fa210))
+* **helm:** load in-memory files ([#6383](https://github.com/knqyf263/trivy/issues/6383)) ([1a67472](https://github.com/knqyf263/trivy/commit/1a67472d2bd6efaf0d0698365d877145f8bc7551))
+* **misconf:** Improve cause performance ([#6586](https://github.com/knqyf263/trivy/issues/6586)) ([770b141](https://github.com/knqyf263/trivy/commit/770b14113cbbaaf55ff26ac8ba160800951b4386))
+* **misconf:** parse rego input once ([#6615](https://github.com/knqyf263/trivy/issues/6615)) ([67c6b1d](https://github.com/knqyf263/trivy/commit/67c6b1d473999003d682bdb42657bbf3a4a69a9c))
+
+
+### Reverts
+
+* **report:** don't escape new line characters for sarif format ([#5897](https://github.com/knqyf263/trivy/issues/5897)) ([56c4e24](https://github.com/knqyf263/trivy/commit/56c4e248aa3fe95097ce495bac459208a4cf8baa))
+
 ## [0.53.0](https://github.com/aquasecurity/trivy/compare/v0.52.0...v0.53.0) (2024-07-01)