# Trivy

> Trivy

- Skill: `neuralblitz/trivy` (Agent Skill)
- Install (CLI): `npx skillmds@latest add neuralblitz/trivy`
- Raw SKILL.md: https://api.skillmd.com/api/skills/neuralblitz/trivy/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: NeuralBlitz (https://skillmd.com/u/neuralblitz)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/neuralblitz/trivy

---

# Trivy

Trivy is a comprehensive security scanner for containers and artifacts. It detects vulnerabilities, misconfigurations, secrets, and compliance issues.

## Key Concepts

- Vulnerability scanning (OS, language packages)
- SBOM generation
- Misconfiguration scanning
- Secret detection
- Air-gapped scanning

## Common Use Cases

- Container image scanning
- Kubernetes security
- IaC scanning
- Compliance checking
- CI/CD security gates

## Best Practices

- Scan in CI/CD pipelines
- Use in admission controllers
- Scan regularly in production
- Configure appropriate severities
- Integrate with SBOM workflows

## Resources

- Trivy: aquasecurity.github.io/trivy
- Related Skills: security, container-security, sast