trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- feat: support multiple package digests with acquisition sources
- feat: support multiple package digests with acquisition sources
- fix(redhat): compare against the installed minor's fix, not the highest fixed version
- bug(misconf): numbers in Terraform list attributes are not converted to strings
- fix(terraform): convert primitives to string in list attributes
- perf: take JSON line numbers from decoder offsets
- docs: link security reporting guidance to relevant documentation
- feat(helm): make livenessProbe and readinessProbe configurable
- bug(redhat): picking the highest fixed version across minor releases reports already-patched packages
- feat(ignore): make id optional in .trivyignore.yaml
- Docs
- Go not yet supported