trivy

What problem does it solve?

This skill helps ensure code and infrastructure are scanned for security vulnerabilities before they are committed, preventing exposure of vulnerable dependencies and misconfigurations.

Core Features & Use Cases

• Pre-commit Security Scans: Run Trivy on filesystem, images, and IaC changes to catch vulnerabilities early.
• CI/CD Integration: Integrate scans into pipelines to fail builds on CRITICAL/HIGH findings.
• Remediation Aids: Provide guidance on upgrading dependencies and generating SBOMs for compliance.
• Use Case: Imagine you modify a Terraform file or update package.json; this skill will detect vulnerabilities in dependencies or configurations before deployment.

Quick Start

Use this skill to perform a filesystem scan in your project: trivy fs --severity CRITICAL,HIGH --exit-code 1 .