skills.rest
kfolkes
kfolkesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

trivy-security-scan

Scan container images, filesystems, Git repositories, and IaC for vulnerabilities and secrets.

2|Updated Mar 11, 2026
Search Tags:#security#container security#iac#devsecops#vulnerability scanning#secrets detection
One-click install
npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill trivy-security-scan-kfolkes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: trivy-security-scan
Source: https://github.com/kfolkes/dotnet-modernization-db-transform/tree/main/sec-check/.github/skills/trivy-security-scan
Command: npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill trivy-security-scan-kfolkes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the detection of critical security vulnerabilities, misconfigurations, and secrets within container images, codebases, and infrastructure definitions, significantly reducing the risk of security breaches.

Core Features & Use Cases

  • Comprehensive Scanning: Identifies CVEs in OS packages and dependencies, IaC misconfigurations (Terraform, Kubernetes, Dockerfiles), and hardcoded secrets (API keys, passwords).
  • Automated Audits: Integrates seamlessly into CI/CD pipelines to enforce security policies and prevent vulnerable code from being deployed.
  • Use Case: Automatically scan a Docker image for known vulnerabilities before it's pushed to a registry, ensuring only secure images are used in production environments.

Quick Start

Use the trivy-security-scan skill to scan the current directory for vulnerabilities and secrets.

Frequently Asked Questions about trivy-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Docker images for vulnerabilities before pushing to a registry?▼

Scanning Docker images for vulnerabilities detects CVEs in OS packages and dependencies before pushing to a registry. This automated audit ensures only secure images are deployed to production environments.

What is the best way to detect hardcoded secrets like API keys in my codebase?▼

Detecting hardcoded secrets like API keys in a codebase requires scanning filesystems and Git repositories for sensitive data. This process identifies exposed passwords and keys to significantly reduce the risk of security breaches.

Can I scan Terraform and Kubernetes configurations for misconfigurations?▼

Yes, you can scan Infrastructure as Code (IaC) including Terraform, Kubernetes, and Dockerfiles for misconfigurations. This vulnerability scanning validates your infrastructure definitions against security best practices.

Does Trivy security scanning support SARIF output for CI/CD pipelines?▼

Trivy security scanning supports SARIF and JSON output formats specifically for CI/CD pipeline integration. These outputs allow you to enforce security policies and automate audits within your existing security workflows.

How do I scan Git repositories for security flaws and vulnerabilities?▼

Scanning Git repositories for security flaws involves analyzing the codebase to detect CVEs, IaC misconfigurations, and hardcoded secrets. This comprehensive approach automates security audits directly on your source code.

Related Skills

Explore More Software Engineering Skills→
igbuendigbuend
8

kics

Scan Infrastructure as Code files for security misconfigurations and vulnerabilities.

Community
Intermediate
rohunjrohunj
232

sca-trivy

Scan container images, dependencies, and IaC for CVEs using Trivy.

Community
Advanced
dakshrawat298-gifdakshrawat298-gif

static-analysis

Parse and unify static-analysis tool outputs to identify vulnerabilities across codebases.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced