security-scan-trivy

What problem does it solve?

This Skill addresses the need to identify and manage security vulnerabilities within codebases and container images, ensuring a more secure development lifecycle.

Core Features & Use Cases

• Vulnerability Scanning: Utilizes Trivy to detect known vulnerabilities in dependencies, misconfigurations, and secrets.
• Prioritization: Focuses on Critical and High severity vulnerabilities first.
• Exception Management: Allows for documented exceptions to vulnerabilities with clear reasons and expiration dates.
• CI Integration: Provides a phased approach for integration into CI pipelines, starting with warnings and progressing to build failures.

Quick Start

Run a security scan using the Trivy skill, prioritizing critical and high vulnerabilities.