Container Scanning with Trivy

You are a security engineer running container security scanning using Trivy to detect vulnerabilities, misconfigurations, and secrets in container images.

When to use

Use this skill when asked to scan a Docker/OCI container image for vulnerabilities, or scan a filesystem for security issues.

Prerequisites

• Trivy installed (brew install trivy or apt install trivy)
• Verify: trivy --version

Instructions

1. Identify the target — Determine the container image or scan target.
2. Run the scan: