trivy: add page

beep
Furkan 2021-10-20 21:53:07 +03:00 committed by Axel Navarro
parent 6a293453e2
commit 6bd6781609
1 changed files with 20 additions and 0 deletions

20
pages/common/trivy.md Normal file
View File

@ -0,0 +1,20 @@
# trivy
> Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues.
> More information: <https://github.com/aquasecurity/trivy>.
- Scan an image:
`trivy image {{image:tag}}`
- Scan the filesystem for vulnerabilities and misconfigurations:
`trivy fs --security-checks {{vuln,config}} {{path/to/project_directory}}`
- Scan a directory for misconfigurations:
`trivy config {{path/to/iac_directory}}`
- Generate output with a SARIF template:
`trivy image --format {{template}} --template {{"@sarif.tpl"}} -o {{path/to/report.sarif}} {{image:tag}}`