Unverified50% confidenceFactExact time
Trivy 是 Aqua Security 开发的开源漏洞扫描器，用于 CI/CD 流水线中对容器镜像和依赖进行安全审计
1
Sources
50%
Confidence
Long-term
Relevance
8/21/2026
First Seen
Sources
Related Claims
UnverifiedSecurity scanning tools such as Snyk, SonarQube, Mend (formerly WhiteSource), npm audit, and Trivy are typically integrated into CI/CD platforms such as Jenkins, GitLab CI, and GitHub Actions as mandatory gatekeeping checks before code merges.61% similarUnverifiedCombining SBOM (Software Bill of Materials) with vulnerability scanning tools such as Trivy and Grype can build a complete chain of trust from build to deployment.60% similarUnverifiedIn 2017, the Triton malware specifically attacked Schneider Electric's Safety Instrumented System (SIS), attempting to bypass physical safety protection mechanisms.57% similarUnverifiedCI/CD 安全集成可部署 SAST 分析源代码漏洞、SCA 检查依赖组件已知漏洞、SBOM 生成组件清单用于审计56% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/782698API
curl https://kongchang.com/api/v1/knowledge/claims/782698MCP
get_claim(id=782698)