Tools
trivy-action
aquasecurity/trivy-action
Trivy Action wraps the Trivy scanner as a GitHub Action so CI pipelines can scan container images, filesystems and infrastructure-as-code for vulnerabilities and upload SARIF reports.
Topics
Related projects
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.
AppInfoScanner3.6kAn information-gathering scanner for red teams and pentesters that extracts URLs, IPs, credentials and sensitive data from Android, iOS and web assets.
ggshield2kggshield is a CLI that detects and validates 500+ types of hardcoded secrets in code, working as a pre-commit hook, CI check or GitHub Action to stop leaks early.
copacetic1.7kA CLI tool that directly patches vulnerabilities in existing container images with buildkit, driven by reports from scanners such as Trivy, without full rebuilds.
kingfisher1.3kKingfisher is a fast secret scanner and credential response tool that detects leaked secrets, validates live credentials, maps blast radius, and supports revocation.
AI-Infra-Guard7.4kAn AI red-teaming platform for scanning agents, MCP servers, skills, infra CVEs, and jailbreak robustness.