trivy

Vulnerability scanner for container images, file systems, and Git repos

Trivy is a comprehensive and versatile security scanner. It finds vulnerabilities (CVEs), misconfigurations (IaC), secrets, SBOMs and licenses across container images, file systems, Git repositories, Kubernetes clusters and cloud accounts. Trivy is easy to use, fast and integrates well into CI pipelines.

homepage ↗homepage ↗ github: aquasecurity/trivy