trivy

Installation
SKILL.md

Aqua Trivy - Comprehensive Security Scanner

When to Use Trivy

Ideal scenarios:

  • Container image vulnerability scanning
  • Filesystem and repository scanning
  • Infrastructure-as-Code (IaC) misconfiguration detection
  • Secrets detection in code and images
  • Software Bill of Materials (SBOM) generation
  • License compliance checking
  • Kubernetes cluster security assessment
  • CI/CD security gates

Complements other tools:

  • Use alongside Semgrep/CodeQL for application code analysis
  • Combine with KICS for additional IaC coverage
Related skills
Installs
8
GitHub Stars
4
First Seen
Feb 19, 2026