Scan filesystems, images, and IaC files for CRITICAL and HIGH vulnerabilities before deployment.
npx skills add https://github.com/mauromedda/agent-toolkit --skill trivy
Please help me install this Agent Skill. Skill: trivy Source: https://github.com/mauromedda/agent-toolkit/tree/main/skills/trivy Command: npx skills add https://github.com/mauromedda/agent-toolkit --skill trivy
This skill helps ensure code and infrastructure are scanned for security vulnerabilities before they are committed, preventing exposure of vulnerable dependencies and misconfigurations.
Use this skill to perform a filesystem scan in your project: trivy fs --severity CRITICAL,HIGH --exit-code 1 .
High-intent search queries and answers about installing and using this skill.
To scan for security vulnerabilities before a commit, run a filesystem scan on your project directory to detect CRITICAL and HIGH findings. This approach catches misconfigurations and vulnerable dependencies early by enforcing an exit code one failure on detection.
Trivy is used in a CI pipeline to scan filesystem, container images, and IaC configurations for security vulnerabilities. It enforces build failures upon detecting CRITICAL or HIGH severity issues and optionally generates an SBOM for compliance.
Yes, you can scan container images and IaC files for misconfigurations using configuration and image scanning modes. This process identifies security vulnerabilities in infrastructure definitions and container layers before deployment.
Yes, you need to have Trivy installed separately to run pre-commit security scans. The skill requires this underlying installation to execute filesystem, image, and config scans for detecting vulnerable dependencies and infrastructure changes.
You can generate an SBOM for your project dependencies during security scanning to ensure compliance. This optional feature runs alongside vulnerability detection to map out all software components in your filesystem or container images.
Pre-commit security scanning prevents exposure of vulnerable dependencies and misconfigurations by catching them locally before deployment. Scanning only in production delays detection, whereas early filesystem and IaC scans provide immediate remediation guidance.
kobogithubAutomate security scanning of container images, filesystems, and Infrastructure as Code with Trivy.
harnessAggregate vulnerabilities, SBOMs, and exemptions via MCP for audit-ready security reports.
aberrantCodeEnforces automated code review across multiple AI engines for commits, PRs, and deployments.
nikhillinitDetect security vulnerabilities, secrets, and misconfigurations in codebases.
