trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- bug(dockerfile): DS-0001 false positive when FROM refers to a stage alias through a global ARG
- fix(terraform): make remote module caching safe for concurrent scans
- bug(terraform): concurrent scans break the remote module cache
- bug(image): ACR authentication fails when ARM audience tokens are disabled on the registry
- fix(image): use ACR audience for Azure registry tokens
- fix(sbom): skip unsupported CycloneDX metadata component types
- fix(sbom): tolerate multiple orphan OS package types
- fix(swift): trim a trailing slash from a Package.resolved location
- fix(conda): strip channel prefix from environment.yml package names
- test(digest): add unit tests for digest helpers
- Docs
- Go not yet supported