# Security

> Generate Tekton Task that uses Trivy to scan generated container for vulnerabilities.

- Skill: `diegosouzapw/security-7` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add diegosouzapw/security-7`
- Raw SKILL.md: https://api.skillmd.com/api/skills/diegosouzapw/security-7/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: diegosouzapw (https://skillmd.com/u/diegosouzapw)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/diegosouzapw/security-7

---


# Vulnerabilities Scan

Generate a Tekton task that uses Trivy to scan a container image and abort the pipeline in case of critical or high vulnerabilities.

## Instructions for Bob

### Step 1: Generate a Tekton Task using Trivy 

The task should receive as parameter the container image name.
The task should only fail if the container image contains CRITICAL or HIGH vulnerabilities.

1. Use the `aquasec/trivy:0.50.0` container to run the `trivy` command.
2. The `exit-code` should be 1 when a vulnerability is found.

The following snippet shows an example:

```yaml
apiVersion: tekton.dev/v1
kind: Task
metadata:
  name: trivy-scan
spec:
  params:
    - name: image-name
      type: string
  steps:
    - name: scan
      image: aquasec/trivy:0.50.0
      script: |
        trivy image --severity CRITICAL,HIGH \
          --exit-code 1 \
          $(params.image-name):$(git rev-parse --short HEAD)

```

## Critical
- Use only trivy tool for vulnerabilities