trivy

Container / code / IaC vulnerability scanner — CVEs, misconfigs, secrets.

Quick Start

# Scan Docker image
trivy image nginx:latest

# Scan filesystem
trivy fs /path/to/code

# Scan Git repo
trivy repo https://github.com/org/project

Scan Types