Fixpoints to think clearly
Summary
This article discusses Trivy, a comprehensive security scanner from Aqua Security. It explains targets such as container images, filesystems, git repositories, VM images, and Kubernetes, and the scanners that detect OS packages and dependencies, CVEs, IaC issues, secrets, and licenses. It covers quick start installation, integration with CI/CD pipelines like GitHub Actions, and notes about canary builds. The key value is showing how automated, cross environment vulnerability scanning can support DevSecOps and IT security in business contexts.