Trivy

Overview

Trivy is an all in one security scanner for modern software development and cloud native environments. It scans container images repositories filesystems Kubernetes clusters and infrastructure as code to identify vulnerabilities exposed secrets and configuration risks. It is widely used in DevSecOps pipelines because it is fast lightweight and easy to integrate.

Key features

• Vulnerability scanning
• Secret detection
• Infrastructure as code analysis
• Container and Kubernetes security
• SBOM generation and compliance checks