trivy

SKILL.md

ABOUTME: Security vulnerability scanning skill using Trivy for pre-commit validation ABOUTME: Enforces blocking of CRITICAL and HIGH severity vulnerabilities across all scan targets

This skill enforces security vulnerability scanning using Trivy before code is committed. CRITICAL and HIGH severity vulnerabilities MUST be resolved before commit.

| New dependency added | Scan filesystem for vulnerabilities | | Dockerfile modified | Scan container image | | go.mod/go.sum changed | Scan Go dependencies | | requirements.txt/pyproject.toml changed | Scan Python dependencies | | package.json/package-lock.json changed | Scan Node.js dependencies | | Terraform files changed | Scan IaC misconfigurations |

使用 Trivy 進行容器映像、文件系統和 IaC 的安全漏洞掃描器。在提交之前阻止嚴重和高嚴重性漏洞。觸發“trivy”、“漏洞掃描”、“安全掃描”、“容器掃描”、“映像掃描”、“sbom”、“cve”、“依賴關係掃描”、“供應鏈安全”、“docker 掃描”、“掃描映像”、“掃描容器”、“檢查漏洞”、“安全檢查”、“許可證掃描”、“秘密掃描”、“錯誤配置掃描”、“iac 掃描”、“terraform 掃描”、 “kubernetes 掃描”、“helm 掃描”、“dockerfile 掃描”、“包漏洞”、“npm 審核”、“pip 審核”、“go mod 漏洞”、“掃描依賴項”、“安全門”、“合規性掃描”、“aqua trivy”。主動：必須在提交具有新依賴項或容器映像的代碼之前調用。 來源：mauromedda/agent-toolkit。

查看原文