This project documents the installation and basic usage of Trivy, an open-source vulnerability scanner. Trivy is used to scan container images, filesystems, and repositories for security vulnerabilities and misconfigurations.
- Simple and fast vulnerability scanning
- No complex setup or database management
- Widely used in DevSecOps pipelines
- Supports containers, filesystems, and IaC scanning
- Scanning Docker images for vulnerabilities
- Checking source code repositories for secrets
- Scanning file systems for OS and library vulnerabilities
- Integrating security checks into CI/CD pipelines
- OS: Ubuntu 20.04 / 22.04
- Tool: Trivy
- Usage: CLI-based security scanning
This section covers installing Trivy on Ubuntu Linux.
(check commands file)
After installation, Trivy is verified by running a basic scan to ensure the tool is working correctly.
- Trivy downloads vulnerability databases automatically
- Internet access is required for initial database update
- Commonly used with Docker and CI/CD tools
This repository provides a simple guide to install and validate Trivy on Ubuntu Linux, forming the foundation for container and application security scanning.