trivy

> Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues.

Scan an image:

trivy image {image:tag}

Scan the filesystem for vulnerabilities and misconfigurations:

trivy fs --security-checks {vuln,config} {path/to/project_directory}

Scan a directory for misconfigurations:

trivy config {path/to/iac_directory}

Generate output with a SARIF template:

trivy image --format {template} --template {"@sarif.tpl"} -o {path/to/report.sarif} {image:tag}

> This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).

-- Response ended

-- Page fetched on Mon May 20 23:11:37 2024