refactor(cli): Rework Trivy Cloud integration logic

docs/docs/references/configuration/cli/trivy.md

@@ -45,14 +45,11 @@ trivy [global flags] command [flags] target
 ### SEE ALSO
 
 * [trivy clean](trivy_clean.md)	 - Remove cached files
-* [trivy cloud](trivy_cloud.md)	 - Control Trivy Cloud platform integration settings
 * [trivy config](trivy_config.md)	 - Scan config files for misconfigurations
 * [trivy convert](trivy_convert.md)	 - Convert Trivy JSON report into a different format
 * [trivy filesystem](trivy_filesystem.md)	 - Scan local filesystem
 * [trivy image](trivy_image.md)	 - Scan a container image
 * [trivy kubernetes](trivy_kubernetes.md)	 - [EXPERIMENTAL] Scan kubernetes cluster
-* [trivy login](trivy_login.md)	 - Log in to the Trivy Cloud platform
-* [trivy logout](trivy_logout.md)	 - Log out of Trivy Cloud platform
 * [trivy module](trivy_module.md)	 - Manage modules
 * [trivy plugin](trivy_plugin.md)	 - Manage plugins
 * [trivy registry](trivy_registry.md)	 - Manage registry authentication

docs/docs/references/configuration/cli/trivy_config.md

@@ -52,6 +52,12 @@ trivy config [flags] DIR
       --output-plugin-arg string          [EXPERIMENTAL] output plugin arguments
       --password strings                  password. Comma-separated passwords allowed. TRIVY_PASSWORD should be used for security reasons.
       --password-stdin                    password from stdin. Comma-separated passwords are not supported.
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

docs/docs/references/configuration/cli/trivy_filesystem.md

@@ -100,6 +100,12 @@ trivy filesystem [flags] PATH
                                             - indirect
                                            (default [unknown,root,workspace,direct,indirect])
       --pkg-types strings                 list of package types (allowed values: os,library) (default [os,library])
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

docs/docs/references/configuration/cli/trivy_image.md

@@ -121,6 +121,12 @@ trivy image [flags] IMAGE_NAME
       --pkg-types strings                 list of package types (allowed values: os,library) (default [os,library])
       --platform string                   set platform in the form os/arch if image is multi-platform capable
       --podman-host string                unix podman socket path to use for podman scanning
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

docs/docs/references/configuration/cli/trivy_repository.md

@@ -99,6 +99,12 @@ trivy repository [flags] (REPO_PATH | REPO_URL)
                                             - indirect
                                            (default [unknown,root,workspace,direct,indirect])
       --pkg-types strings                 list of package types (allowed values: os,library) (default [os,library])
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

docs/docs/references/configuration/cli/trivy_rootfs.md

@@ -102,6 +102,12 @@ trivy rootfs [flags] ROOTDIR
                                             - indirect
                                            (default [unknown,root,workspace,direct,indirect])
       --pkg-types strings                 list of package types (allowed values: os,library) (default [os,library])
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

docs/docs/references/configuration/cli/trivy_vm.md

@@ -92,6 +92,12 @@ trivy vm [flags] VM_IMAGE
                                             - indirect
                                            (default [unknown,root,workspace,direct,indirect])
       --pkg-types strings                 list of package types (allowed values: os,library) (default [os,library])
+      --pro-api-url string                API URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://api.trivy.dev")
+      --pro-server-scanning               Use server-side image scanning in Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-token string                  Token used to athenticate with Trivy Pro platform
+      --pro-trivy-server-url string       Trivy Server URL for Trivy Pro platform, requires the token to be provided to have an effect (default "https://scan.trivy.dev")
+      --pro-upload-results                Upload results to Trivy Pro platform, requires the token to be provided to have an effect (default true)
+      --pro-use-secret-config             Use secret configurations from Trivy Pro platform, requires the token to be provided to have an effect (default true)
       --raw-config-scanners strings       specify the types of scanners that will also scan raw configurations. For example, scanners will scan a non-adapted configuration into a shared state (allowed values: terraform)
       --redis-ca string                   redis ca file location, if using redis as cache backend
       --redis-cert string                 redis certificate file location, if using redis as cache backend

go.mod

@@ -111,7 +111,7 @@ require (
 	github.com/twitchtv/twirp v8.1.3+incompatible
 	github.com/xeipuuv/gojsonschema v1.2.0
 	github.com/xlab/treeprint v1.2.0
-	github.com/zalando/go-keyring v0.2.6
+	github.com/zalando/go-keyring v0.2.6 // indirect
 	github.com/zclconf/go-cty v1.17.0
 	github.com/zclconf/go-cty-yaml v1.1.0
 	go.etcd.io/bbolt v1.4.3
@@ -133,7 +133,6 @@ require (
 )
 
 require (
-	al.essio.dev/pkg/shellescape v1.5.1 // indirect
 	buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go v1.36.6-20250718181942-e35f9b667443.1 // indirect
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.6-20250717185734-6c6e0d3c608e.1 // indirect
 	buf.build/gen/go/bufbuild/registry/connectrpc/go v1.18.1-20250721151928-2b7ae473b098.1 // indirect
@@ -226,7 +225,6 @@ require (
 	github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
 	github.com/cyberphone/json-canonicalization v0.0.0-20231011164504-785e29786b46 // indirect
 	github.com/cyphar/filepath-securejoin v0.6.0 // indirect
-	github.com/danieljoos/wincred v1.2.2 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
 	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
@@ -283,7 +281,6 @@ require (
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/goccy/go-yaml v1.15.23 // indirect
-	github.com/godbus/dbus/v5 v5.1.0 // indirect
 	github.com/gofrs/flock v0.12.1 // indirect
 	github.com/gofrs/uuid v4.3.1+incompatible // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect

go.sum

@@ -702,8 +702,6 @@ github.com/google/s2a-go v0.1.9 h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0=
 github.com/google/s2a-go v0.1.9/go.mod h1:YA0Ei2ZQL3acow2O62kdp9UlnvMmU7kA6Eutn0dXayM=
 github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 h1:SJ+NtwL6QaZ21U+IrK7d0gGgpjGGvd2kz+FzTHVzdqI=
 github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2/go.mod h1:Tv1PlzqC9t8wNnpPdctvtSUOPUUg4SHeE6vR1Ir2hmg=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
 github.com/google/tink/go v1.7.0 h1:6Eox8zONGebBFcCBqkVmt60LaWZa6xg1cl/DwAh/J1w=
 github.com/google/tink/go v1.7.0/go.mod h1:GAUOd+QE3pgj9q8VKIGTCP33c/B7eb4NhxLcgTJZStM=
 github.com/google/trillian v1.7.2 h1:EPBxc4YWY4Ak8tcuhyFleY+zYlbCDCa4Sn24e1Ka8Js=

mkdocs.yml

@@ -169,14 +169,6 @@ nav:
               - CLI:
                   - Overview: docs/references/configuration/cli/trivy.md
                   - Clean: docs/references/configuration/cli/trivy_clean.md
-                  - Cloud:
-                      - Cloud: docs/references/configuration/cli/trivy_cloud.md                      
-                      - Cloud Config: docs/references/configuration/cli/trivy_cloud_config.md 
-                      - Cloud Config Edit: docs/references/configuration/cli/trivy_cloud_config_edit.md 
-                      - Cloud Config List: docs/references/configuration/cli/trivy_cloud_config_list.md
-                      - Cloud Config Set: docs/references/configuration/cli/trivy_cloud_config_set.md
-                      - Cloud Config Unset: docs/references/configuration/cli/trivy_cloud_config_unset.md
-                      - Cloud Config Get: docs/references/configuration/cli/trivy_cloud_config_get.md
                   - Config: docs/references/configuration/cli/trivy_config.md
                   - Convert: docs/references/configuration/cli/trivy_convert.md
                   - Filesystem: docs/references/configuration/cli/trivy_filesystem.md