aquasecurity / trivy

Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.