trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc...

kube-trivy

A Simple and Comprehensive Vulnerability Scanner for Kubernetes Abstract KubeTrivy is a extends trivy for kubernetes. KubeTrivy is a simple and comprehensive vulnerability scanner for Kubernetes. KubeTrivy detects vulnerabilities of OS packages Alpine, RHEL, CentOS, etc. and application...

trivy-repo

trivy-repo deb/rpm repository for Trivy Debian/Ubuntu root@kitploit: $ sudo apt-get install wget apt-transport-https gnupg $ wget -qO - https://get.trivy.dev/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg /dev/null $ echo "deb signed-by=/usr/share/keyrings/trivy.gpg...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

starboard

Starboard se une a Trivy. Hemos anunciado nuestros planes de discontinuar Starboard y fusionarlo con Trivy. La CLI de Starboard se ha reintroducido como el comando trivy kubernetes y starboard-operator con un enfoque en las capacidades de trivy está disponible como Trivy-Operator. No aceptaremos...

hoppr-cop

Hoppr-Cop Para Vigilar las Vulnerabilidades de tu SBOM Hoppr Cop es una cli y una biblioteca de Python que genera información de vulnerabilidades de alta calidad a partir de un cyclone-dx Software Bill of Materials SBOM mediante la agregación de datos de múltiples bases de datos de...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

trivy-operator

Kit de herramientas de seguridad nativo de Kubernetes. Documentación...

trivy-plugin-aqua

trivy-plugin-aqua Trivy plugin for integration with Aqua Security SaaS platform Usage Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files Set Aqua plugin as Trivy's current default plugin by exporting an environment variable root@kitploit: export...

tfsec

📣 tfsec to Trivy Migration As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is Trivy. Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations...

trivy-action

Trivy Action GitHub Action для Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Содержание Использование Сканирование конвейера CI Сканирование конвейера CI с конфигурацией Trivy Кэш Настройка Trivy Сканирование Tarball Использование...

trivy

📖 문서 Trivy 발음는 포괄적이고 다재다능한 보안 스캐너입니다. Trivy는 보안 문제를 찾는 스캐너 와 그러한 문제를 찾을 수 있는 대상 을 가지고 있습니다. 대상 Trivy가 스캔할 수 있는 대상: 컨테이너 이미지 파일 시스템 Git 리포지토리 원격 가상 머신 이미지 Kubernetes 스캐너 Trivy가 찾을 수 있는 것: 사용 중인 OS 패키지 및 소프트웨어 종속성 SBOM 알려진 취약점 CVE IaC 문제 및 잘못된 구성 민감 정보 및 비밀 소프트웨어 라이선스 Trivy는 대부분의 인기 있는 프로그래밍 언어, 운영...

SAFE

SAFE SAFE performs controlled, repository-aware security assessment of Semgrep and Trivy findings in research artifacts. It supports two independent classification tasks: direct binary prediction SECURITYRELEVANT or NONSECURITY and the detailed multiclass contextual taxonomy three labels — see...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21801-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21801-1 advisory. - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543....

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.74.0-0.2.hum1 aarch64, x8664 trivy-0.74.0-0.2.hum1.src src Security Fixes: trivy: CVE-2026-71556...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

trivy-plugin-kubectl

trivy-plugin-kubectl A Trivy plugin that scans the images of a kubernetes resource Install root@kitploit: $ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl $ trivy kubectl -h Usage: trivy kubectl -h,--help TYPE NAME TRIVY OPTION A Trivy plugin that scans the images of a kubernet...

trivy-plugin-attest

trivy-plugin-attest Publish SBOM attestation Install root@kitploit: $ trivy plugin install github.com/aquasecurity/trivy-plugin-attest Usage root@kitploit: A Trivy plugin that publish SBOM attestation Usage: attest flags Examples: trivy attest --type PREDICATETYPE --predicate PREDICATEPATH BLOBPA...

trivy-enforcer

trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup root@kitploit: $ kubectl apply -f...

trivy-module-wordpress

Trivy WoredPress Module This module provides a more in-depth investigation of Wordpress detection. Set up root@kitploit: $ tinygo build -o wordpress.wasm -scheduler=none -target=wasi --no-debug wordpress.go $ mkdir -p /.trivy/modules $ cp wordpress.wasm /.trivy/modules It is also available in GHC...