Trivy

Purpose

Use this skill for focused container, filesystem, and configuration review when the engagement includes build artifacts, images, or IaC.

Phase Fit

• Primary: Vulnerability Analysis
• Secondary: Threat Modeling and Test Planning, Retest and Closure

Use When

• Need to assess a container image, source tree, or IaC for material exposure.
• Need to understand whether known package or config risk affects the target.
• Need a repeatable retest after hardening.

Avoid When