Trivy
Security scanner for container images, Kubernetes, repos, and IaC
What it is
A command-line scanner that checks container images, filesystems, remote Git repositories, VM images, and Kubernetes clusters for known CVEs, misconfigurations, exposed secrets, and software licenses. It can also produce an SBOM listing the OS packages and dependencies in use. DevOps and security teams run it locally or in CI pipelines, with integrations for GitHub Actions, a Kubernetes operator, and VS Code.