Docker
You're viewing a free preview. Sign in free to read every script.
Why this exists An image is a stack of other people's software: a base operating system, a language runtime, libraries, and your code. New vulnerabilities are published every day against software that has not changed,…
Vulnerability Scan Gate with Trivy: Fixable Findings, Secrets, Expiring Exceptions and Honest Exit Codes
A gate script that fails a pipeline on fixable HIGH and CRITICAL vulnerabilities or secrets baked into an image, supports reviewed exceptions that expire, and separates "findings" from "the scan itself broke", run for real against an old base image, a clean one and an image that contains AWS-style credentials.
Sign in free to read this script, along with the rest of the library.
Sign in free