trivy

Trivy GitLab CI Component A GitLab CI component for Trivy — the all-in-one security scanner covering container images, filesystems, repositories, Kubernetes clusters, SBOMs, and license compliance. Plug these templates directly into your pipelines to get repeatable scans, GitLab-native reports, a...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

trivy-plugin-aqua

trivy-plugin-aqua 用于与 Aqua Security SaaS 平台集成的 Trivy 插件 用法 Trivy 的选项需在 -- 之后传递。Trivy 接收包含 IaC 文件的目标目录 通过导出环境变量，将 Aqua 插件设为 Trivy 当前的默认插件 root@kitploit: export TRIVYRUNASPLUGIN=aqua 扫描 IaC 目标 root@kitploit: trivy 扫描 IaC 目标并标记扫描 root@kitploit: trivy 扫描 IaC 目标并仅报告特定严重性 root@kitploit: trivy...

checkov v3.3.16

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...