trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- bug(terraform): both .tf and .tofu files with the same name are scanned
- fix(terraform): skip .tf files shadowed by .tofu files
- feat(cli): add --log-format flag for structured JSON logs
- perf(secret): replace per-rule keyword search with one Aho-Corasick pass
- chore(deps): bump the github-actions group across 1 directory with 5 updates
- feat: add linux/loong64 support
- docs: use canonical misconfiguration flags
- perf(secret): move the leading word boundary check out of the regex
- fix(python): normalize package names in pip and pipenv parsers
- fix(spdx): do not read NOASSERTION back as a license
- Docs
- Go not yet supported