Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more - Releases · aquasecurity/trivy

Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities - aquasecurity/trivy-action

The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which …

Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Oct 7, 2024 · Creating a new organization (e.g., aqua-trivy/trivy-db-mirror) may help to get around the limit, but we are not sure if creating another organization just to work around the rate limits is allowed …

since I'm running the trivy via docker image I had to specify a cache folder inside the container, and I saw that trivy map /tmp as volume so I used '--cache-dir /tmp/trivy-cache' and it worked.

If you have already installed trivy by other means, e.g. calling aquasecurity/setup-trivy directly, or are invoking this action multiple times then you can use the skip-setup-trivy input to disable this step.

Azure Pipelines Task for trivy. Contribute to aquasecurity/trivy-azure-pipelines-task development by creating an account on GitHub.