# Trivy Scan

> Scan containers and dependencies for vulnerabilities with Trivy

- Skill: `majiayu000/trivy-scan` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/trivy-scan`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/trivy-scan/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/trivy-scan

---


# Trivy Vulnerability Scanner

Scan container images, filesystems, and dependencies for vulnerabilities.

## What To Do

1. **Install**: `choco install trivy` or `brew install trivy`

2. **Scan container image**:
   ```bash
   trivy image --severity HIGH,CRITICAL --format json -o trivy-report.json myapp:latest
   ```

3. **Scan filesystem (NuGet/npm)**:
   ```bash
   trivy fs --severity HIGH,CRITICAL --scanners vuln .
   ```

4. **Scan IaC (Terraform, Helm, Dockerfile)**:
   ```bash
   trivy config --severity HIGH,CRITICAL .
   ```

5. **CI Integration**:
   ```yaml
   - script: trivy image --exit-code 1 --severity CRITICAL $(ACR_NAME).azurecr.io/$(IMAGE):$(TAG)
     displayName: "Container Scan"
   ```

## Arguments
- `<image-or-path>`: Container image or filesystem path
- `--severity=<levels>`: Filter (LOW, MEDIUM, HIGH, CRITICAL)