trivy

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

HummerRisk 是云原生安全平台，包括混合云安全治理和容器云安全检测。

ValidKube combines the best open-source tools to help ensure Kubernetes YAML best practices, hygiene & security.

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, AES encryption, Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management.

Vulnerability scanning just got lazier

🧹 Cleaning up images from Kubernetes nodes

📦 CLI tool for directly patching container images using reports from vulnerability scanners

Use Trivy as a plug-in vulnerability scanner in the Harbor registry

A set of curated exercises to help you prepare for the CKS exam

Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.

Web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive data table.

GitHub Issue + Trivy Action

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).

Kubernetes Operator based on the open-source container vulnerability scanner Trivy.

GitHub Action to check for vulnerabilities in your container image

Udemy Course on DevSecOps

A Prometheus Exporter for managing vulnerabilities in kubernetes by using trivy

trivy-db-to is a tool for migrating/converting vulnerability information from Trivy DB to other datasource.

An Azure Pipelines Task for trivy

Docker Desktop Extension for Trivy