# Trivy Container Security Scanner > Integrates Aqua Security Trivy CLI for comprehensive container image vulnerability scanning. Detects OS package CVEs, language-specific dependency vulnerabilities, and IaC misconfigurations with SARIF output format for CI/CD pipeline integration. - Skill: `tomevault-io/trivy-container-security-scanner` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/trivy-container-security-scanner` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/trivy-container-security-scanner/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/trivy-container-security-scanner --- # Trivy Container Security Scanner Integrates Aqua Security Trivy CLI for comprehensive container image vulnerability scanning. Detects OS package CVEs, language-specific dependency vulnerabilities, and IaC misconfigurations with SARIF output format for CI/CD pipeline integration. ## Installation Requirements and caveats from upstream: - ![Docker Pulls][docker-pulls] - docker run aquasec/trivy - There are canary builds ([Docker Hub](https://hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary), [GitHub](https://github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary), [ECR](https://gallery.ec... Basic usage or getting-started notes: - ### Get Trivy - Trivy is available in most common distribution channels. The full list of installation options is available in the [Installation] page. Here are a few popular examples: - brew install trivy - Source: https://github.com/aquasecurity/trivy - Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/trivy/HEAD/README.md ## Source - [Agent Skill Exchange](https://agentskillexchange.com/skills/trivy-container-security-scanner/) --- > Source: [agentskillexchange/skills](https://github.com/agentskillexchange/skills) — distributed by [TomeVault](https://tomevault.io).