trivy
Scanner for container images, filesystems, IaC and secrets. Useful when the program includes Docker Hub images, GitHub repos, or Terraform.
Tags: cve, containers, secrets, misconfig
- Category
- cloud
- Maintenance signal
- active
Use this when: CI trust. Match a lockfile or image you already have to published advisories.
Install
brew
brew install trivygo
go install github.com/aquasecurity/trivy/cmd/trivy@latestCommand templates
Scan an image
trivy image {image}Scan a repo
trivy fs --scanners vuln,secret,misconfig {path}