Trivy - Security Scanner
Trivy is an open-source security scanner for containers, Kubernetes, and other cloud-
native environments. It identifies vulnerabilities, misconfigurations, and other
security issues in Docker images, Kubernetes clusters, filesystems, and repositories.
Key Features
Vulnerability Scanning: Scans Docker images for vulnerabilities in OS and
software packages.
Configuration Scanning: Checks Infrastructure-as-Code (IaC) files like
Kubernetes manifests and Terraform for misconfigurations.
File and Repo Scanning: Scans local directories, files, and Git repositories
for vulnerabilities.
CI/CD Integration: Integrates into CI/CD pipelines for automated security
checks.
Platform Support: Compatible with Docker, Kubernetes, and cloud platforms (AWS,
Azure, Google Cloud).
Installation
Docker
docker run aquasec/trivy
Scan a Docker Image
trivy image
Scan a Directory
trivy fs