sca-trivy
OfficialEnd-to-end SCA and container scanning.
Software Engineering#trivy#sbom#sca#container-security#vulnerability-scanning#dependency-scanning#iac-security
AuthorAgentSecOps
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill helps teams continuously identify and remediate vulnerabilities, license risks, and misconfigurations across the software supply chain by combining SCA, SBOM generation, and CI/CD integration using Trivy.
Core Features & Use Cases
- Software Composition Analysis across containers, dependencies, and IaC
- SBOM generation in CycloneDX and SPDX formats
- CI/CD integration with SARIF output and remediation prioritization based on CVSS and licenses
- End-to-end scanning workflow including container, filesystem, and IaC assessments
Quick Start
Run a full scan to detect vulnerabilities, misconfigurations, and license risks across images, dependencies, and IaC, then generate an SBOM and remediation guidance.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferencesassets
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: sca-trivy Download link: https://github.com/AgentSecOps/SecOpsAgentKit/archive/main.zip#sca-trivy Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.