Trivy

Paket

Open-source CLI for container and filesystem vulnerability scanning

Fiyat: Free, open source
Erişim: None, runs locally

Hakkında

Local security scanner for container images, filesystems and repositories. It checks OS and language packages for vulnerabilities and can scan secrets and infrastructure misconfiguration. Scanners and database downloads are configurable; it does not dynamically attack running web applications.

Neler yapabilirsin

Scan container images for vulnerable OS packages and language dependencies
Check a repository or filesystem for known dependency vulnerabilities
Enable configuration scanning for Terraform and Kubernetes security issues

Başlarken

Install the Trivy CLI for your operating system
Allow it to download vulnerability databases or configure offline databases
Run trivy image or trivy filesystem against your target

Örnek kod

trivy image --scanners vuln alpine:3.20
trivy filesystem --scanners vuln .

Ayrıntılar

Barındırma: Kendi bilgisayarında, Kendi sunucunda
Kullanılabildiği yerler: Tüm dünya
MCP sunucusu: Yok