Trivy

@aquasecurity

About Trivy

Scan containers, filesystems, repositories, Kubernetes, and SBOMs for vulnerabilities and misconfiguration.

#trivy#security#product-service-cli#official#agent-ready#container-security-cli#sbom-cli

brew install trivy

Vulnerability scanning

Misconfiguration checks

SBOM generation

$ bw

Access and manage Bitwarden vault items, organizations, collections, and secrets from scripts.

$ snyk

Scan source code, dependencies, containers, and infrastructure as code for security vulnerabilities.

$ doppler

Fetch and inject Doppler secrets into local commands, applications, and deployment workflows.

$ infisical

Authenticate, inject secrets, export configuration, and scan repositories for leaked credentials.

$ ggshield

Detect exposed secrets in repositories, commits, files, Docker images, and CI pipelines.

$ vault

Read, write, rotate, and manage secrets, authentication methods, policies, and encryption services.