Trivy
- Trivy is an open-source vulnerability scanner that detects security issues in container images, file systems, and Git repositories.
- It identifies vulnerabilities in both operating system packages and application dependencies, helping secure containerized applications.
- Scan a Docker image for vulnerabilities:
trivy image <image_name> - Scan a local directory for known security issues:
trivy fs <directory_path>