Scan sbom

Scan a Software Bill of Materials file for vulnerabilities

trivy sbom ./sbom.json

More trivy commands

Scan filesystem

trivy fs --severity HIGH,CRITICAL .

Scan a local directory for vulnerabilities and misconfigs
Scan k8s cluster

trivy k8s --report summary cluster

Security audit of the whole cluster: images, configs, RBAC
Scan specific namespace

trivy k8s --namespace production --report summary all

Scan workloads only in a specific namespace
Scan Helm chart

trivy config ./my-chart

Check Helm chart templates for security misconfigurations
Scan with JSON output

trivy image --format json -o results.json img:tag

Machine-readable vulnerability scan results