// Guard secrets & permissions
trivyv0.75.0
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Open source Maintained For agents
IN ONE PARAGRAPH
trivy is find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
Good for: Developers who want their agent (Claude Code, Codex, Cursor…) to guard secrets & permissions.
01How to start
- 1Read the official README for requirements and permissions.
- 2Install it as the official guide describes.
- 3Tell your agent the command exists (e.g. in AGENTS.md / CLAUDE.md) so it knows when to call it.
02Alternatives & comparison
Compare side by side → grype A vulnerability scanner for container images and filesystems ★ 13k syft CLI tool and library for generating a Software Bill of Materials from container images and filesystems ★ 9.6k infisical Infisical is the open-source platform for secrets, certificates, and privileged access management. ★ 30k vault A tool for secrets management, encryption as a service, and privileged access management ★ 36k gitleaks Find secrets with Gitleaks 🔑 ★ 30k
03Related
- ?How to check an MCP server is genuine and safe before installing
- ?LiteLLM 1.107.0 was compromised: am I affected, and what to do
- ›BlueDot Impact AI Alignment 课程 · BlueDot ImpactEnglish
- ›BlueDot Impact AI Governance 课程 · BlueDot ImpactEnglish
- ›AI Safety, Ethics and Society 教材 · Center for AI Safety / Dan HendrycksEnglish
- ›OWASP Top 10 for LLM Applications · OWASP GenAI Security ProjectMultilingual (incl. EN/ZH)
- ›MITRE ATLAS · MITREEnglish
- All tutorials →