Trivy Project

Overview

Trivy is a comprehensive and easy-to-use vulnerability scanner for container images, file systems, and Git repositories. It detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.).

Features

• Container Image Scanning: Detect vulnerabilities in container images.
• File System Scanning: Scan your file system for vulnerabilities.
• Git Repository Scanning: Identify vulnerabilities in your Git repositories.
• CI Integration: Easily integrate with your CI/CD pipelines.

Installation

To install Trivy, follow these steps:

# Install via Homebrew
brew install aquasecurity/trivy/trivy

# Install via apt (Debian/Ubuntu)
sudo apt-get install trivy

# Install via yum (RHEL/CentOS)
sudo yum install trivy

Usage

Scanning a Container Image

trivy image <image_name>

Scanning a File System

trivy fs <directory>

Scanning a Git Repository

trivy repo <repository_url>

Contributing

We welcome contributions! Please see our CONTRIBUTING.md for guidelines on how to get started.

License

This project is licensed under the MIT License. See the LICENSE file for more details.

Contact

For any questions or feedback, please open an issue on our GitHub repository.