Trivy

1# Ubuntu / Debian
2sudo apt-get install wget apt-transport-https gnupg lsb-release
3wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg > /dev/null
4echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" | sudo tee /etc/apt/sources.list.d/trivy.list
5sudo apt-get update
6sudo apt-get install trivy
7 
8# Or direct install
9curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin

1trivy --version

1# Scan image for vulnerabilities
2trivy image nginx:latest
3 
4# Scan with severity filter
5trivy image --severity HIGH,CRITICAL nginx:latest
6 
7# Output as JSON
8trivy image -f json -o results.json nginx:latest

1# Scan local filesystem
2trivy fs .
3 
4# Scan Terraform
5trivy config ./terraform/
6 
7# Scan Kubernetes manifests
8trivy config ./k8s/

1trivy image --download-db-only