Outage in Qlty Software
Build failures for projects with Trivy enabled
Resolved Minor
March 02, 2026 - Started 3 days ago
- Lasted about 24 hours
Incident Report
Trivy experienced a security incident on 2026-03-01, which resulted in GitHub releases between v0.27.0 and v0.69.1 being deleted, causing build failures for any project using an affected version of the Trivy plugin.
Workarounds:
• Pin Trivy to v0.69.2 in your .qlty/qlty.toml
• Or temporarily disable the Trivy plugin until the situation is resolved
For more details on the upstream incident, see the Trivy security incident report: https://github.com/aquasecurity/trivy/discussions/10265.
Components affected
Qlty Software Code AnalysisNeed to monitor Qlty Software outages?
- Monitor all your external dependencies in one place
- Get instant alerts when outages are detected
- Be the first to know if service is down
- Show real-time status on private or public status page
- Keep your team informed
Latest Updates ( sorted recent to last )
MONITORING
3 days ago - at 03/02/2026 05:16PM
CLI v0.615.0 has been released with the following fixes:
• Trivy is no longer enabled by default when generating a new qlty.toml
• Unpinned Trivy usage will now automatically use v0.69.2, the latest available release
If you have Trivy pinned to a specific version in your .qlty/qlty.toml, you will need to either update it to 0.69.2 or disable the plugin until the upstream situation is resolved.
For more details on the upstream incident, see the Trivy security incident report: https://github.com/aquasecurity/trivy/discussions/10265
IDENTIFIED
3 days ago - at 03/02/2026 03:31PM
Trivy experienced a security incident on 2026-03-01, which resulted in GitHub releases between v0.27.0 and v0.69.1 being deleted, causing build failures for any project using an affected version of the Trivy plugin.
Workarounds:
• Pin Trivy to v0.69.2 in your .qlty/qlty.toml
• Or temporarily disable the Trivy plugin until the situation is resolved
For more details on the upstream incident, see the Trivy security incident report: https://github.com/aquasecurity/trivy/discussions/10265.
Latest Qlty Software outages
Timeout commit status being sent for PRs - 9 days ago
Delayed analysis builds - 15 days ago
Delayed analysis builds - 16 days ago
GitHub analysis results delayed - about 1 month ago
GitHub Incident resulting in downstream qlty.sh issues - about 2 months ago
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6020 services available
Integrations with
