diff --git a/pages/common/trivy.md b/pages/common/trivy.md new file mode 100644 index 0000000000..1faaf00be4 --- /dev/null +++ b/pages/common/trivy.md @@ -0,0 +1,20 @@ +# trivy + +> Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues. +> More information: . + +- Scan an image: + +`trivy image {{image:tag}}` + +- Scan the filesystem for vulnerabilities and misconfigurations: + +`trivy fs --security-checks {{vuln,config}} {{path/to/project_directory}}` + +- Scan a directory for misconfigurations: + +`trivy config {{path/to/iac_directory}}` + +- Generate output with a SARIF template: + +`trivy image --format {{template}} --template {{"@sarif.tpl"}} -o {{path/to/report.sarif}} {{image:tag}}`