trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- fix(misconf): keep '=' in TF_VAR_ environment variable values
- fix(cloudformation): allow '=' in parameter values
- fix(cache): reject a Redis CA file without PEM certificates
- fix(fanal): close containerd client on error paths
- feat(install): support user-supplied checksum for install.sh
- fix(nodejs): match npm link targets on a path boundary
- fix(nodejs): read yarn.lock block fields by indent level
- bug(kubernetes): checks with a `kind` selector run on all Kubernetes objects once one object matches
- feat(secret): add Composio API key detection rules
- fix(misconf): apply checks with subtypes only to matching inputs
- Docs
- Go not yet supported