trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- perf(go): stream the ELF symbol table to find version symbols
- CycloneDX: scan fails entirely when orphan OS packages belong to more than one type (e.g. `deb` and `apk`)
- fix(python): find site-packages in Windows venvs for pip license detection
- feat(dotnet): detect packages in .NET single-file bundles
- docs: add KestreLynx to production integrations
- feat(go): collect module h1 checksums as package digests
- fix(nodejs): npm link matches packages of another workspace with the same path prefix
- fix(nodejs): yarn.lock parser takes the package name from dependenciesMeta keys
- Preserve misconfiguration hierarchy in SARIF code flows
- chore(deps): bump the common group across 1 directory with 7 updates
- Docs
- Go not yet supported