Назад на вештине
Trivy
Од 2019Comprehensive security scanner
Comprehensive security scanner — container images, filesystems, Git repos, and Kubernetes clusters in one tool.
Преглед
Trivy is my primary container and infrastructure security scanner. I integrate it into CI/CD pipelines to scan Docker images for CVEs before deployment. It also scans IaC files (Terraform, Kubernetes manifests) for misconfigurations, Git repos for secrets, and running K8s clusters for vulnerabilities. Fast, accurate, and zero-config.
Случајеви употребе
- Container image scanning
- IaC security
- secret detection
- K8s cluster scanning
- SBOM generation
- CI/CD security gates
Предности
- Fast and accurate
- zero-config
- comprehensive (images + IaC + secrets)
- CI/CD friendly
- SBOM support
- free and open source
Разматрања
- Can produce false positives
- database updates needed
- limited remediation guidance
- large vulnerability DB download