>_Trivy公式
@aquasecurity
詳細
Trivy について
Scan containers, filesystems, repositories, Kubernetes, and SBOMs for vulnerabilities and misconfiguration.
インストール
brew install trivyできること
Vulnerability scanning
Misconfiguration checks
SBOM generation
コマンド例
- 1
trivy image node:20 - 2
trivy fs . - 3
trivy config .
その他のセキュリティ CLI
Snyk CLI
$ snyk
Scan source code, dependencies, containers, and infrastructure as code for security vulnerabilities.
Bitwarden CLI
$ bw
Access and manage Bitwarden vault items, organizations, collections, and secrets from scripts.
Doppler CLI
$ doppler
Fetch and inject Doppler secrets into local commands, applications, and deployment workflows.
GitGuardian ggshield
$ ggshield
Detect exposed secrets in repositories, commits, files, Docker images, and CI pipelines.
Gitleaks
$ gitleaks
Detect hardcoded secrets in Git repositories, files, and CI pipelines.
HashiCorp Vault CLI
$ vault
Read, write, rotate, and manage secrets, authentication methods, policies, and encryption services.
コメント