Trivy Alternatives
-
Moby
Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
-
dockerfile
Dockerfile best-practices for writing production-worthy Docker images.
-
Scout
Get performance insights in less than 4 minutes. Scout APM uses tracing logic that ties bottlenecks to source code so you know the exact line of code causing performance issues and can get back to building a great product faster.
-
docker-flask-example
A production ready example Flask app that's using Docker and Docker Compose.
-
dive
A tool for exploring each layer in a docker image
-
Vault
A tool for secrets management, encryption as a service, and privileged access management
-
Gson
A Java serialization/deserialization library to convert Java Objects into JSON and back
-
Keycloak
Open Source Identity and Access Management For Modern Applications and Services
-
Twig
Twig, the flexible, fast, and secure template language for PHP
-
DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-
hadolint
Dockerfile linter, validate inline bash, written in Haskell
-
falco
Cloud Native Runtime Security
-
Spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
-
Thymeleaf
Thymeleaf is a modern server-side Java template engine for both web and standalone environments.
-
dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
-
selinux-coloring-book
A coloring book to help folks understand how SELinux works.
-
caddy-docker
Source for the official Caddy v2 Docker Image
Posts
-
Trivy: scanning your containers for vulnerabilities
Shift left security refers to moving security sooner in the development process. It aims at having security in mind from the get-go and not when "sh*t hits the fan". One tool that can help us with securing our systems is Trivy.
- Web Application Security Checklist (2021)
- Container security scanner
-
Container scanning tools
Check out Trivy: https://github.com/aquasecurity/trivy
-
Dockerfile Best Practices
+1 for hadolint. There's also https://github.com/goodwithtech/dockle and https://github.com/aquasecurity/trivy if you want more security emphasis.
Stats
aquasecurity/trivy is an open source project licensed under Apache License 2.0 which is an OSI approved license.