trivy commands

15 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 15 shown

  • Scan filesystem
    trivy fs --severity HIGH,CRITICAL .

    Scan a local directory for vulnerabilities and misconfigs

    security

  • Scan k8s cluster
    trivy k8s --report summary cluster

    Security audit of the whole cluster: images, configs, RBAC

    security

  • Scan specific namespace
    trivy k8s --namespace production --report summary all

    Scan workloads only in a specific namespace

    security

  • Scan Helm chart
    trivy config ./my-chart

    Check Helm chart templates for security misconfigurations

    security · helm

  • Scan with JSON output
    trivy image --format json -o results.json img:tag

    Machine-readable vulnerability scan results

    security

  • Scan IaC directory
    trivy config --severity MEDIUM,HIGH,CRITICAL ./terraform

    Find misconfigurations in Terraform/Kubernetes/Helm code

    security · terraform

  • Ignore unfixed CVEs
    trivy image --ignore-unfixed --severity HIGH,CRITICAL img:tag

    Skip vulnerabilities that have no fix available yet

    security

  • Update vulnerability DB
    trivy image --download-db-only

    Pre-download the latest vulnerability database

    security

  • Scan filesystem
    trivy fs .

    Scan the current directory for vulnerabilities

    security · scan · filesystem

  • Scan Kubernetes cluster
    trivy k8s --report summary cluster

    Scan the entire Kubernetes cluster for vulnerabilities and misconfigs

    security · k8s · scan

  • Scan with SARIF output
    trivy image --format sarif --output results.sarif myimage:tag

    Output scan results in SARIF format for CI/IDE integration

    security · sarif · ci

  • Scan config files
    trivy config .

    Scan IaC config files for misconfigurations

    security · iac · config

  • Filter by severity
    trivy image --severity HIGH,CRITICAL myimage:tag

    Show only HIGH and CRITICAL vulnerabilities

    security · severity · filter

  • Ignore unfixed vulns
    trivy image --ignore-unfixed myimage:tag

    Skip vulnerabilities that have no fix available

    security · ignore · filter

  • Scan sbom
    trivy sbom ./sbom.json

    Scan a Software Bill of Materials file for vulnerabilities

    security · sbom · scan