trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- bug(nodejs): yarn analyzer reports devDependencies of a workspace as production when another workspace depends on it
- feat(report): add PURLs in sarif report
- feat(report): add CWE IDs to rule tags
- fix(java): check the version when validating a groupId from the manifest
- perf: compile the trace redaction patterns once
- fix(fs): fail the scan when the root directory cannot be read
- feat(vuln): add CSAF-VEX vulnerability rescore
- fix(alpine): fall back to installed version when apk has no o: line
- bug(sbom): vulnerabilities are attached to a random package when scanning an SPDX SBOM with SBOM output
- fix(rust): detect versionless direct cargo dependencies
- Docs
- Go not yet supported