Trivy
Vulnerability scanner for containers, dependencies and IaC.
CLIOpen source
Simple, fast scanner that looks for vulnerabilities, insecure configurations and secrets in images, repositories and manifests.
When to use
To scan Docker images and dependencies in CI at no cost.
When to avoid
If you need centralized vulnerability management and context-based prioritization.
Alternatives
They do a similar job. Compare before choosing.
Detects vulnerabilities in dependencies, code and containers.
ServiceFreemium
Related
From the same area, with a close purpose.
Static security analysis with rules that look like the code.
CLIOpen source★ 17.4K