trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- bug(pnpm): direct optionalDependencies in importers are marked as dev
- fix(nodejs): treat pnpm v9 importer optionalDependencies as production
- bug(misconf): API Gateway v1 adapters skip methods on the REST API root resource
- release: v0.77.0 [main]
- bug(arm): Key Vault network ACL default action is never read
- fix(arm): read Key Vault network ACL default action from resource properties
- fix(vex): keep every CycloneDX statement for the same vulnerability ID
- bug(cloudformation): API Gateway v1 adapter keeps only one stage and one resource per REST API
- fix(misconf): keep all API Gateway v1 stages, resources and root methods
- bug(python): pylock.toml dependencies without a version are dropped from the dependency graph
- Docs
- Go not yet supported