Trivy
A comprehensive open-source security scanning tool by Aqua Security that covers container image vulnerability scanning as well as IaC configuration files and Git repositories. Widely adopted in the CNCF ecosystem, it is a mainstream scanning engine in the cloud-native security domain.
Timeline (last 90 days)
Container security recommendations include using Trivy to scan for vulnerabilities, verifying signatures with Cosign, and attaching an SBOM file.
Trivy, Grype, and Snyk are commonly used container image vulnerability scanners.
Dockhand integrates two scanning engines, Grype and Trivy, enabling detection of CVE vulnerabilities in images before they are released.
Trivy is open-sourced by Aqua Security and, in addition to image scanning, covers scenarios such as IaC configuration files and Git repositories, and is widely adopted within the CNCF ecosystem.
All Facts (4)
Container security recommendations include using Trivy to scan for vulnerabilities, verifying signatures with Cosign, and attaching an SBOM file.
50%UnverifiedTrivy, Grype, and Snyk are commonly used container image vulnerability scanners.
50%UnverifiedDockhand integrates two scanning engines, Grype and Trivy, enabling detection of CVE vulnerabilities in images before they are released.
50%UnverifiedTrivy is open-sourced by Aqua Security and, in addition to image scanning, covers scenarios such as IaC configuration files and Git repositories, and is widely adopted within the CNCF ecosystem.
50%