Filter by severity

Show only HIGH and CRITICAL vulnerabilities

trivy image --severity HIGH,CRITICAL myimage:tag
tool
trivy15 commands
tags
trivysecurityseverityfilter

More trivy commands

  • Ignore unfixed vulns
    trivy image --ignore-unfixed myimage:tag

    Skip vulnerabilities that have no fix available

  • Scan sbom
    trivy sbom ./sbom.json

    Scan a Software Bill of Materials file for vulnerabilities

  • Scan filesystem
    trivy fs --severity HIGH,CRITICAL .

    Scan a local directory for vulnerabilities and misconfigs

  • Scan k8s cluster
    trivy k8s --report summary cluster

    Security audit of the whole cluster: images, configs, RBAC

  • Scan specific namespace
    trivy k8s --namespace production --report summary all

    Scan workloads only in a specific namespace

all 15 trivy commands