Scan with SARIF output trivy

Output scan results in SARIF format for CI/IDE integration

trivy image --format sarif --output results.sarif myimage:tag

#trivy #security #sarif #ci

more trivy all 15 commands →

Scan config files trivy config . Filter by severity trivy image --severity HIGH,CRITICAL myimage:tag Ignore unfixed vulns trivy image --ignore-unfixed myimage:tag Scan sbom trivy sbom ./sbom.json Scan filesystem trivy fs --severity HIGH,CRITICAL .