Trivy
Trivy is a free tool that scans software, containers and servers for known security weaknesses, leaked passwords and risky settings. It is aimed mainly at programmers and IT staff who want to check their projects before release.
How hard it is to start using it. Easy: install it like a normal app, or use it in your browser. Advanced: you run it on your own server, use the command line, or it is a tool for developers.
Features
Screenshots
Listed in
Covers leaked secrets and package vulnerabilities; no code-level review or live package-behavior monitoring stated.
How to help
AI contributionsNot stated
The project has not said how it feels about AI-written contributions. Maintainers can set this by claiming the listing.