长亭百川云 - 产品详情

banner
产品logo

trivy

148

0

云原生安全扫描工具,发现仓库、K8S、容器内的漏洞、配置缺陷、敏感信息等安全隐患。

产品logo
trivy

云原生安全扫描工具,发现仓库、K8S、容器内的漏洞、配置缺陷、敏感信息等安全隐患。

Trivy (pronunciation) is a comprehensive and versatile security scanner.
Trivy has scanners that look for security issues, and targets where it can find those issues.

Targets (what Trivy can scan):

  • Container Image
  • Filesystem
  • Git Repository (remote)
  • Virtual Machine Image
  • Kubernetes
  • AWS

Scanners (what Trivy can find there):

  • OS packages and software dependencies in use (SBOM)
  • Known vulnerabilities (CVEs)
  • IaC issues and misconfigurations
  • Sensitive information and secrets
  • Software licenses

Trivy supports most popular programming languages, operating systems, and platforms. For a complete list, see the Scanning Coverage page.

To learn more, go to the Trivy homepage for feature highlights, or to the Documentation site for detailed information.

Quick Start

Get Trivy

Trivy is available in most common distribution channels. The full list of installation options is available in the Installation page. Here are a few popular examples:

Trivy is integrated with many popular platforms and applications. The complete list of integrations is available in the Ecosystem page. Here are a few popular examples:

Canary builds

There are canary builds (Docker Hub, GitHub, ECR images and binaries) as generated every push to main branch.

Please be aware: canary builds might have critical bugs, it's not recommended for use in production.

General usage

1trivy <target> [--scanners <scanner1,scanner2>] <subject>

Examples:

1trivy image python:3.4-alpine
Result

https://user-images.githubusercontent.com/1161307/171013513-95f18734-233d-45d3-aaf5-d6aec687db0e.mov

1trivy fs --scanners vuln,secret,misconfig myproject/
Result

https://user-images.githubusercontent.com/1161307/171013917-b1f37810-f434-465c-b01a-22de036bd9b3.mov

1trivy k8s --report summary cluster
Result

k8s summary

FAQ

How to pronounce the name "Trivy"?

tri is pronounced like trigger, vy is pronounced like envy.

Want more? Check out Aqua

If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering.
You can find a high level comparison table specific to Trivy users here.
In addition check out the https://aquasec.com website for more information about our products and services.
If you'd like to contact Aqua or request a demo, please use this form: https://www.aquasec.com/demo

Community

Trivy is an Aqua Security open source project.
Learn about our open source work and portfolio here.
Contact us about any matter by opening a GitHub Discussion here
Join our Slack community to stay up to date with community efforts.

Please ensure to abide by our Code of Conduct during all interactions.

1.7k

7

一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术,作为反向代理接入,保护你的网站不受黑客攻击。

产品关联图片
预览
产品关联图片
预览
产品关联图片
预览
产品关联图片
预览
产品logo

长亭科技

1.4k

3

百川云堡垒机是一款简单、方便、好用的服务器统一管理、监控工具。

产品关联图片
预览
产品关联图片
预览
产品关联图片
预览
产品关联图片
预览
产品logo

长亭科技

824

2

洞鉴是一款从资产视角出发,集Web漏洞扫描、主机服务漏洞扫描、基线合规检查于一体,实现资产风险闭环管理的安全评估系统。

828

1

百川 WebShell 检测工具是长亭科技提供的在线 webshell 检测检测工具, 应用与长亭主机安全,容器安全,流量监测等产品. 一键提交检测

产品关联图片
预览
关注或联系我们
添加百川云公众号,移动管理云安全产品
咨询热线:
4000-327-707
百川公众号
百川公众号
百川云客服
百川云客服

Copyright ©2024 北京长亭科技有限公司
icon
京ICP备 2024055124号-2