Trivy
Skill ComeOnOliver/skillshub/skills/TerminalSkills/skills/trivy
🧠The right skill, one API call. AI agent skills registry with token-efficient skill resolution. 5,000+ skills from 500+ top repos.From the repository description
npx -y skills add ComeOnOliver/skillshub --skill trivyAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
SKILL.md
0.9 KB, 234 tokens by cl100k_base, as published. Nobody here has run it
Trivy
Overview
Trivy is an open-source vulnerability scanner by Aqua Security. Scans container images, filesystems, git repos, and IaC for vulnerabilities, misconfigurations, and exposed secrets.
Instructions
Step 1: Install
brew install trivy
Step 2: Container Scanning
trivy image node:20-alpine
trivy image --severity CRITICAL,HIGH my-app:latest
trivy image --format json --output results.json my-app:latest
Step 3: Filesystem and Secret Scan
trivy fs .
trivy fs --scanners vuln,secret,misconfig .
Step 4: IaC Scanning
trivy config ./terraform/
trivy config ./k8s/
Guidelines
- Free and open-source — no account needed.
- Local vulnerability DB, updated automatically — scans are fast.
- Supports SBOM generation (CycloneDX, SPDX) for compliance.
- Use in CI to block deployments with critical CVEs.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.