aquasecurity / trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
☆902Updated last week
Alternatives and similar repositories for trivy-action:
Users that are interested in trivy-action are comparing it to the libraries listed below
- Anchore container analysis and scan provided as a GitHub Action☆233Updated this week
- A set of GitHub actions for checking your projects for vulnerabilities☆542Updated 6 months ago
- 🧵 CLI tool for directly patching container images!☆1,212Updated this week
- Kubernetes-native security toolkit☆1,430Updated last week
- Terraform GitHub provider☆957Updated last week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,244Updated last week
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,387Updated this week
- A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.☆460Updated 2 weeks ago
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆745Updated last week
- GitHub action for Hadolint, A Dockerfile linting tool☆212Updated last year
- Sets up Terraform CLI in your GitHub Actions workflow.☆1,437Updated last week
- Language-agnostic SLSA provenance generation for Github Actions☆453Updated this week
- Security risk analysis for Kubernetes resources☆1,292Updated this week
- Supply-chain Levels for Software Artifacts☆1,621Updated this week
- Official GitHub Action for OpenSSF Scorecard.☆287Updated this week
- Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…☆963Updated 6 months ago
- A GitHub action that installs Terraform linter TFLint☆160Updated this week
- A tool for securing CI/CD workflows with version pinning.☆804Updated this week
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆2,933Updated this week
- A FAST Kubernetes manifests validator, with support for Custom Resources!☆2,487Updated last month
- A GitHub action to help you scan your docker image for vulnerabilities☆221Updated 2 years ago
- Pike is a tool for determining the permissions or policy required for IAC code☆676Updated this week
- Read your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant.☆1,820Updated 2 months ago
- Update version constraints in your Terraform configurations☆581Updated 7 months ago
- A GitHub Action for running the ZAP Full scan☆297Updated 4 months ago
- A GitHub Action for running the ZAP Baseline scan☆321Updated 4 months ago
- GitHub Action for Infracost. See cloud cost estimates for Terraform in pull requests. 💰📉 Love your cloud bill!☆246Updated last month
- Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in …☆2,864Updated last week
- A Github action for generating Terraform module documentation using terraform-docs and gomplate☆162Updated 6 months ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆796Updated last week