Scan Kubernetes cluster

Scan the entire Kubernetes cluster for vulnerabilities and misconfigs

trivy k8s --report summary cluster
tool
trivy15 commands
tags
trivysecurityk8sscan

More trivy commands

  • Scan with SARIF output
    trivy image --format sarif --output results.sarif myimage:tag

    Output scan results in SARIF format for CI/IDE integration

  • Scan config files
    trivy config .

    Scan IaC config files for misconfigurations

  • Filter by severity
    trivy image --severity HIGH,CRITICAL myimage:tag

    Show only HIGH and CRITICAL vulnerabilities

  • Ignore unfixed vulns
    trivy image --ignore-unfixed myimage:tag

    Skip vulnerabilities that have no fix available

  • Scan sbom
    trivy sbom ./sbom.json

    Scan a Software Bill of Materials file for vulnerabilities

all 15 trivy commands