Scan Kubernetes cluster trivy

Scan with SARIF output trivy image --format sarif --output results.sarif myimage:tag Scan config files trivy config . Filter by severity trivy image --severity HIGH,CRITICAL myimage:tag Ignore unfixed vulns trivy image --ignore-unfixed myimage:tag Scan sbom trivy sbom ./sbom.json