trivy

Trivy GitLab CI 组件 一个面向 Trivy 的 GitLab CI 组件——Trivy 是一款全功能安全扫描器，涵盖容器镜像、文件系统、仓库、Kubernetes 集群、SBOM 以及许可证合规性。将这些模板直接插入你的流水线，即可获得可重复的扫描、GitLab 原生报告以及便携式工件，几乎无需编写 Shell 脚本。 功能特性 完整覆盖面 ：容器、文件系统、根文件系统、Git 仓库、虚拟机、SBOM、Kubernetes 集群等。 多扫描器 ：漏洞、错误配置/IaC、密钥和许可证扫描，每个作业均可控制。 GitLab 报告 ：输出容器扫描、JUnit、SARIF 和...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

trivy-plugin-aqua

trivy-plugin-aqua 用于与 Aqua Security SaaS 平台集成的 Trivy 插件 用法 Trivy 的选项需在 -- 之后传递。Trivy 接收包含 IaC 文件的目标目录 通过导出环境变量，将 Aqua 插件设为 Trivy 当前的默认插件 export TRIVYRUNASPLUGIN=aqua 扫描 IaC 目标 trivy 扫描 IaC 目标并标记扫描 trivy 扫描 IaC 目标并仅报告特定严重性 trivy --severities CRITICAL,HIGH 命令行参数 参数| 用途| 示例用法 ---|---|--- --debug| 在...

checkov v3.3.19

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

checkov v3.3.16

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

trivy-plugin-aqua v0.239.0

trivy-plugin-aqua Trivy plugin for integration with Aqua Security SaaS platform Usage Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files Set Aqua plugin as Trivy's current default plugin by exporting an environment variable root@kitploit: export...

checkov v3.3.12

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...