--- title: "#trivy articles | Hashnode" description: "Explore 166 articles tagged #trivy on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/trivy" --- Tag # #trivy 166 posts · 10 followers [Varun Varde](https://hashnode.com/@varunvarde) · [Nov 3](https://hashnode.com/posts/how-to-build-a-devsecops-pipeline-in-one-day-using-open-source-tools/6ae9ab685f284b78f868c9cb) ### [How to Build a DevSecOps Pipeline in One Day Using Open-Source Tools](https://varunvarde.hashnode.dev/how-to-build-a-devsecops-pipeline-in-one-day-using-open-source-tools?utm_source=hashnode&utm_medium=feed) Learn how to build a practical DevSecOps pipeline in one day using open-source tools for code scanning, dependency security, container scanning, 22 min read · [varunvarde.hashnode.dev](https://varunvarde.hashnode.dev/how-to-build-a-devsecops-pipeline-in-one-day-using-open-source-tools?utm_source=hashnode&utm_medium=feed) [AngusKit](https://hashnode.com/@anguskit) · [Nov 1](https://hashnode.com/posts/intranet-vuln-db-offline-update-rollback/6ae6bec8d128590709e29578) ### [Updating the vuln DB on an intranet: offline bundles and rollback](https://anguskit.hashnode.dev/intranet-vuln-db-offline-update-rollback?utm_source=hashnode&utm_medium=feed) Refresh Trivy’s vulnerability database on an intranet with update-trivy-db or an offline bundle, and roll the cache directory back if import fails. 7 min read · [anguskit.hashnode.dev](https://anguskit.hashnode.dev/intranet-vuln-db-offline-update-rollback?utm_source=hashnode&utm_medium=feed) [AngusKit](https://hashnode.com/@anguskit) · [Oct 19](https://hashnode.com/posts/replace-semgrep-trivy-and-gitleaks-scripts-with-one-scan-gate/6ad613a2b6088d0e98730c6f) ### [Replace Semgrep, Trivy, and Gitleaks scripts with one scan gate](https://anguskit.hashnode.dev/replace-semgrep-trivy-and-gitleaks-scripts-with-one-scan-gate?utm_source=hashnode&utm_medium=feed) When CI runs three scanners with three logs, fold them into one job, one Finding model, and one gate—plus a Semgrep migration checklist. 7 min read · [anguskit.hashnode.dev](https://anguskit.hashnode.dev/replace-semgrep-trivy-and-gitleaks-scripts-with-one-scan-gate?utm_source=hashnode&utm_medium=feed) [George Ezejiofor](https://hashnode.com/@georgeezejiofor) · [Sep 13](https://hashnode.com/posts/harden-lockdown-rke2-4-layer-devsecops-stack/6aa72f10cca5078c78064081) ### [Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack](https://georgeezejiofor.com/harden-lockdown-rke2-4-layer-devsecops-stack?utm_source=hashnode&utm_medium=feed) I poured the concrete with Terraform. I framed the house with Ansible and RKE2. Before moving the furniture in, I installed the locks, cameras, alarms, and guards. 26 min read · [georgeezejiofor.com](https://georgeezejiofor.com/harden-lockdown-rke2-4-layer-devsecops-stack?utm_source=hashnode&utm_medium=feed) [Hardik Arora](https://hashnode.com/@Hardik999) · [Sep 13](https://hashnode.com/posts/my-breaking-and-learningjourney-with-azure-devops/6aa66310a823e12c453ac4d4) ### [My Breaking and LearningJourney with Azure Devops](https://hardik0811arora.hashnode.dev/my-breaking-and-learningjourney-with-azure-devops?utm_source=hashnode&utm_medium=feed) Moving forward with practical learning journey through .NET builds, Docker, Azure DevOps, container security, and a few pipeline failures along the way. 7 min read · [hardik0811arora.hashnode.dev](https://hardik0811arora.hashnode.dev/my-breaking-and-learningjourney-with-azure-devops?utm_source=hashnode&utm_medium=feed) [Harshit Sahu](https://hashnode.com/@harshit2311) · [Sep 7](https://hashnode.com/posts/secure-docker-images-container-scanning/6a9ea12f4925e2588dce4152) ### [Secure Docker Images & Container Scanning](https://harshitsahu2311.hashnode.dev/secure-docker-images-container-scanning?utm_source=hashnode&utm_medium=feed) Containers transformed software delivery by making applications portable, lightweight, and consistent across environments. But every Docker image carries more than application code—it also carries an 12 min read · [harshitsahu2311.hashnode.dev](https://harshitsahu2311.hashnode.dev/secure-docker-images-container-scanning?utm_source=hashnode&utm_medium=feed) [Matt Brown](https://hashnode.com/@mattbrownsec) · [Jun 4](https://hashnode.com/posts/trivy-operator-the-scanner-that-leaves-receipts/6a21f0db318ee8975e1fa63b) ### [Trivy Operator: The Scanner That Leaves Receipts](https://cloudsecburrito.com/trivy-operator-the-scanner-that-leaves-receipts?utm_source=hashnode&utm_medium=feed) A practical walkthrough of how Trivy Operator turns image, config, secret, and RBAC findings into Kubernetes-native reports. 15 min read · [cloudsecburrito.com](https://cloudsecburrito.com/trivy-operator-the-scanner-that-leaves-receipts?utm_source=hashnode&utm_medium=feed) [Matt Brown](https://hashnode.com/@mattbrownsec) · [Jun 4](https://hashnode.com/posts/deploying-oss-kubernetes-security-console/6a20f25c2f611e6372ca185e) ### [Deploying OSS Kubernetes Security Console](https://cloudsecburrito.com/deploying-oss-kubernetes-security-console?utm_source=hashnode&utm_medium=feed) Welcome to the Jungle 10 min read · [cloudsecburrito.com](https://cloudsecburrito.com/deploying-oss-kubernetes-security-console?utm_source=hashnode&utm_medium=feed) [Hardik Arora](https://hashnode.com/@Hardik999) · [Jun 1](https://hashnode.com/posts/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai/6a1d923a080b80f11f56e721) ### [Building a Zero-Egress, AI-Driven DevSecOps Pipeline: My Journey with SupplyChain-Guardian-AI](https://hardik0811arora.hashnode.dev/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai?utm_source=hashnode&utm_medium=feed) I wanted to explore a different paradigm: What if the pipeline didn't just report the vulnerability, but actually reasoned about it, patched the code, proved the fix worked in a live Kubernetes cluster, and opened a Pull Request? 7 min read · [hardik0811arora.hashnode.dev](https://hardik0811arora.hashnode.dev/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai?utm_source=hashnode&utm_medium=feed) [Matt Brown](https://hashnode.com/@mattbrownsec) · [May 28](https://hashnode.com/posts/building-an-oss-kubernetes-security-console-with-mcp/6a189bbe782587548330aa2d) ### [Building an OSS Kubernetes Security Console with MCP](https://cloudsecburrito.com/building-an-oss-kubernetes-security-console-with-mcp?utm_source=hashnode&utm_medium=feed) Turning open source security signals into an agent-ready investigation layer 12 min read · [cloudsecburrito.com](https://cloudsecburrito.com/building-an-oss-kubernetes-security-console-with-mcp?utm_source=hashnode&utm_medium=feed)