CmdID

CmdID / Commands

trivy

Scanner for vulnerabilities in container images, filesystems, and Git repositories, as well as for configuration issues. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Scan a Docker image for vulnerabilities and exposed secrets

trivy image image:tagIdentify

Scan a Docker image filtering the output by severity

trivy image --severity HIGH,CRITICAL alpine:3.15Identify

Scan a Docker image ignoring any unfixed/unpatched vulnerabilities

trivy image --ignore-unfixed alpine:3.15Identify

Scan the filesystem for vulnerabilities and misconfigurations

trivy fs --scanners vuln,misconfig path/to/project_directoryIdentify

Scan an IaC (Terraform, CloudFormation, ARM, Helm, and Dockerfile) directory for misconfigurations

trivy config path/to/iac_directoryIdentify

Scan a local or remote Git repository for vulnerabilities

trivy repo path/to/local_repository_directoryIdentify

Scan a Git repository up to a specific commit hash

trivy repo --commit commit_hash repositoryIdentify

Generate output with a SARIF template

trivy image --format template --template "@sarif.tpl" --output path/to/report.sarif image:tagIdentify