Trivy

Use it when

• scan containers and dependencies for known vulnerabilities in CI
• check images, filesystems, repositories, IaC, and software bills of materials

What it solves

Not the fit when

• a vulnerability match does not prove exploitability in the deployed context

Install

brew install trivy

Invoke

trivy image --severity HIGH,CRITICAL your-image:tag

Alternatives

No reviewed alternatives recorded yet.