trivy

trivy 0.74.0

Simple and comprehensive vulnerability scanner for containers, suitable for CI

<rendered-html><p>Trivy is a simple and comprehensive vulnerability scanner for containers and other artifacts. A software vulnerability is a glitch, flaw, or weakness present in the software or in an Operating System. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.).</p> </rendered-html>

https://github.com/aquasecurity/trivy
Apache License 2.0
main program: trivyprograms: trivy
Platforms (30)
mips64-linuxmicroblazeel-linuxs390x-linuxriscv64-linuxarmv5tel-linuxm68k-linuxpowerpc-linuxx86_64-freebsd
View source on NixOS/nixpkgs →

Install

Copy into your configuration

NixOS (configuration.nix)
environment.systemPackages = with pkgs; [
  trivy
];
Ad-hoc shell
nix-shell -p trivy
Flake (nix run)
nix run nixpkgs#trivy