Execute Aqua Trivy security scans for vulnerabilities, secrets, and misconfigurations.
npx skills add https://github.com/igbuend/grimbard --skill trivy-igbuend
Please help me install this Agent Skill. Skill: trivy Source: https://github.com/igbuend/grimbard/tree/main/skills/trivy Command: npx skills add https://github.com/igbuend/grimbard --skill trivy-igbuend
This Skill automates the process of identifying security vulnerabilities, misconfigurations, and secrets within container images, Infrastructure as Code (IaC) files, and code repositories.
Use the trivy skill to scan the current directory for vulnerabilities and secrets.
High-intent search queries and answers about installing and using this skill.
Vulnerability and secrets scanning detects OS package flaws and hardcoded API keys in container images. This Skill executes comprehensive security scans to identify these risks across various ecosystems before deployment.
IaC misconfiguration detection identifies security risks in Terraform, CloudFormation, Kubernetes manifests, and Dockerfiles. This Skill scans these configurations to automatically pinpoint infrastructure security flaws.
SBOM generation creates a Software Bill of Materials in CycloneDX and SPDX formats. This Skill outputs these inventory lists to provide a transparent record of application dependencies and components.
Vulnerability scanning supports SARIF output for CI/CD integration. This Skill generates SARIF files so you can automatically scan container image builds and display security results directly in your pipeline.
Scanning git repositories for security risks involves checking code, dependencies, and IaC configurations for vulnerabilities. This Skill executes comprehensive scans across filesystems and repositories to identify these issues.
Filesystem scanning identifies vulnerabilities, secrets, and misconfigurations in local directories. This Skill executes security scans directly on your filesystem to detect risks in application dependencies and code.
alxayoScan container images, filesystems, Git repos, and Kubernetes for vulnerabilities and misconfigurations.
AgentSecOpsScan container images and SBOMs for vulnerabilities with Grype.
Ryno-Crypto-Mining-ServicesCreate CI/CD pipelines with GitHub Actions, Terraform, and Prometheus.
not-subhuOrchestrate dependency audits, static application security testing, and privacy dataflow analysis.
