trivy
https://github.com/aquasecurity/trivy
Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported6 Subscribers
Add a CodeTriage badge to trivy
Help out
- Issues
- feat(secret): add Anthropic API key and token detection rules
- feat(secret): add Grafana service account and Cloud token rules
- feat(report): add suppression support to SARIF output
- fix(helm): point the ingress at the service named by service.name
- bug(misconf): KSV-0109 fails with an evaluation conflict when a line has both ':' and '='
- bug(misconf): ARM adapter does not read blob soft delete policy from nested blobServices resource
- fix(arm): read blob soft delete policy from nested blobServices resource
- bug(yarn): packages pinned by `resolutions` are marked as production dependencies
- CycloneDX: scan fails entirely when `metadata.component` has an unsupported type (e.g. `firmware`)
- feat(crypto): support RSA-PSS keys
- Docs
- Go not yet supported