Nazad na veštine
Trivy
Od 2019Comprehensive security scanner
Comprehensive security scanner — container images, filesystems, Git repos, and Kubernetes clusters in one tool.
Pregled
Trivy is my primary container and infrastructure security scanner. CI/CD integration for Docker image CVE scans. IaC files, Git repos for secrets, running K8s clusters. Fast, accurate, zero-config.
Slučajevi upotrebe
- Container image scanning
- IaC security
- secret detection
- K8s cluster scanning
- SBOM generation
- CI/CD security gates
Prednosti
- Fast and accurate
- zero-config
- comprehensive (images + IaC + secrets)
- CI/CD friendly
- SBOM support
- free and open source
Razmatranja
- Can produce false positives
- database updates needed
- limited remediation guidance
- large vulnerability DB download