GitHub - knqyf263/trivy: Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets (what Trivy can scan): Container Image Filesystem Git Repository (remote) Virtual Machine Image Kubernetes Scanners (what Trivy can find there): OS packages and software dependencies in use (SBOM) Known vulnerabilities (CVEs)

[efcl]

Docker Imageの脆弱性チェックツール。 gemやnpmなどのアプリケーションの依存もチェックする

[braitom]

コンテナイメージ用の脆弱性スキャナー。OSパッケージやアプリケーションの依存関係の脆弱性を検出できる。Go製。

[mattn]

コンテナの脆弱性スキャナ。便利そう。 #golang 製

[dorokei]

Comprehensive Vulnerability Scanner for Containers, Suitable for CI