Trivy is an open-source security scanner that finds vulnerabilities, misconfigurations, secrets and SBOMs in container images, filesystems, Git repositories and Kubernetes.
