Ignore unfixed vulns

Skip vulnerabilities that have no fix available

trivy image --ignore-unfixed myimage:tag

More trivy commands

Scan sbom

trivy sbom ./sbom.json

Scan a Software Bill of Materials file for vulnerabilities
Scan filesystem

trivy fs --severity HIGH,CRITICAL .

Scan a local directory for vulnerabilities and misconfigs
Scan k8s cluster

trivy k8s --report summary cluster

Security audit of the whole cluster: images, configs, RBAC
Scan specific namespace

trivy k8s --namespace production --report summary all

Scan workloads only in a specific namespace
Scan Helm chart

trivy config ./my-chart

Check Helm chart templates for security misconfigurations