News for hackers. Stuff that matters.
Re:Trivy: A scanner for vulnerabilities in containers, file ... by Jabihjo on Thursday November 11, 2021 @08:57AM (#29187849)
It seems that this does the same thing as Anchore. Is there a difference that I'm not seeing? Also, I couldn't find anything for Trivy that gives you a nice web UI like what Snyk does, or did I miss something there as well?
Re:Trivy: A scanner for vulnerabilities in containers, file ... by efrecon on Thursday November 11, 2021 @02:28AM (#29185379)
Trivy is good. It comes bundled with the harbor docker registry, meaning you get security analysis of your images and provide for some level of security as you can prevent pulling critical images (or whatever level you deem necessary).
Re:Trivy: A scanner for vulnerabilities in containers, file ... by zxcvbn4038 on Wednesday November 10, 2021 @09:56PM (#29183952)
I’ve had a great experience with Trivy, very solid tool, very easy to write automation around.
Re:Trivy: A scanner for vulnerabilities in containers, file ... by jamesfinlayson on Wednesday November 10, 2021 @10:07PM (#29184032)
Is this what powers AquaSec?
Re:Trivy: A scanner for vulnerabilities in containers, file ... by cpressland on Thursday November 11, 2021 @04:04AM (#29185980)
Yes, we use AquaSec and it’s absolutely the same engine. Trivy is so good we were tempted to drop AquaSec entirely as we only use it in our CI and this covers our requirements.
Re:Trivy: A scanner for vulnerabilities in containers, file ... by markuman123 on Thursday November 11, 2021 @09:05AM (#29187927)
it's super easy to integrate in every ci/cd pipeline