Trivy
Trivy, from Aqua Security, scans container images, file systems, Git repositories, Kubernetes and IaC files such as Terraform for known CVEs, insecure settings and leaked secrets.
Key concepts #
- Image scan: vulnerabilities in OS packages and libraries.
- Config scan: misconfigurations in Dockerfiles, Kubernetes and Terraform.
- Easy to run in a CI pipeline such as GitHub Actions.
Learn it #
See Docker image security scanning and Terraform security scanning.
More tutorials that use Trivy
Related tutorials
- Docker & Rancher Desktop Tutorials
Docker Image Security: Scan with Trivy and Harden Your Containers
Secure Docker images and containers: scan for vulnerabilities with Trivy or Docker Scout, pin base images, run as non-root, read-only, drop capabilities, manage secrets.
Security
HashiCorp Vault
HashiCorp Vault is a secrets manager that stores, generates and encrypts credentials, tokens and keys with fine-grained access control and audit logs.
- Security
Checkov
Checkov is an open source static analysis tool that scans Terraform, Kubernetes and Dockerfile code for security and compliance misconfigurations.