Trivy Reference: Container Scanning, K8s Cluster Audit, IaC Misconfigs & CI Integration
Trivy commands for container and K8s security scanning.
Most useful flags (that most people don't know)
# Don't drown in noise — only show HIGH/CRITICAL with a fix available:
trivy image --severity HIGH,CRITICAL --ignore-unfixed nginx:latest
# Scan ...
releaserun.hashnode.dev2 min read