Maintainers
Pricing
Enterprise
More
More
Documentation
Try Live
Rankings
Install
Blog
Docs7
Ask
New
Add Docs
Trivy
https://trivy.dev/latest/
Admin
Trivy is a comprehensive and easy-to-use security scanner that finds vulnerabilities,
...
Tokens:
367,450
Snippets:
2,133
Trust Score:
9.2
Update:
1 year ago
Context
Chat
Benchmark
69.07
Latest
Show doc for...
Code
Info
Show Results
Tokens:
Raw
Copy
Link
Tokens:
Raw
Copy
Link
### Install Trivy using Install Script Source: https://trivy.dev/latest/getting-started/installation This section details how to install Trivy using an official installation script. It's a straightforward method for getting Trivy up and running quickly. ```Shell # Example command (actual script content not provided in the text) curl -sfL https://aquasecurity.github.io/trivy-installer/installer.sh | bash -s -- --version "$(< VERSION)" ``` -------------------------------- ### Trivy Plugins: Developer Guide Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init A guide for developers interested in creating their own Trivy plugins. It covers the plugin architecture, APIs, development environment setup, and best practices for building robust plugins. ```go package main import ( "github.com/aquasecurity/trivy/pkg/plugin" ) func main() { plugin.Register(&plugin.PluginInfo{ Name: "my-custom-plugin", Version: "1.0.0", Run: myCustomScanFunc, }) } func myCustomScanFunc(ctx plugin.ScanContext, opts plugin.ScanOptions) ([]plugin.Result, error) { // Custom scanning logic here return []plugin.Result{}, nil } ``` -------------------------------- ### Searching and Installing Plugins via Trivy Plugin Index Source: https://trivy.dev/latest/docs/plugin/developer-guide Shows how to search for and install plugins using the Trivy plugin index, facilitating easier discovery and installation of community plugins. ```bash trivy plugin search trivy plugin install kubectl ``` -------------------------------- ### Trivy Plugins: User Guide Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init Provides instructions for end-users on how to discover, install, and utilize Trivy plugins to extend its scanning capabilities. Covers common use cases and basic plugin management. ```markdown To use a plugin, first install it using `trivy plugin install <plugin-name>`. Then, you can run it using `trivy plugin run <plugin-name> --args ...`. ``` -------------------------------- ### Testing Trivy Plugin Installation Locally Source: https://trivy.dev/latest/docs/plugin/developer-guide Instructions on how to test the installation of a Trivy plugin on your local development environment before publishing. ```Shell # Example command to test plugin installation locally (conceptual) trivy plugin install /path/to/your/plugin/directory ``` -------------------------------- ### Installing a Trivy Plugin from GitHub Source: https://trivy.dev/latest/docs/plugin/developer-guide Demonstrates the command to install a Trivy plugin directly from a GitHub repository, assuming the `plugin.yaml` file is located in the root directory. ```bash trivy plugin install github.com/org/repo ``` -------------------------------- ### Trivy Plugin Manifest Example (plugin.yaml) Source: https://trivy.dev/latest/docs/plugin/developer-guide An example of a `plugin.yaml` file for the `trivy-plugin-kubectl` project, demonstrating how to define plugin metadata, usage, and platform-specific download URIs and binaries. ```yaml name:"kubectl" version:"0.1.0" repository:github.com/aquasecurity/trivy-plugin-kubectl maintainer:aquasecurity output:false summary:Scan kubectl resources description:|- A Trivy plugin that scans the images of a kubernetes resource. Usage: trivy kubectl TYPE[.VERSION][.GROUP] NAME platforms: -selector:# optional os:darwin arch:amd64 uri:./trivy-kubectl# where the execution file is (local file, http, git, etc.) bin:./trivy-kubectl# path to the execution file -selector:# optional os:linux arch:amd64 uri:https://github.com/aquasecurity/trivy-plugin-kubectl/releases/download/v0.1.0/trivy-kubectl.tar.gz bin:./trivy-kubectl ``` -------------------------------- ### Install Trivy with mise Source: https://trivy.dev/latest/getting-started/installation This snippet demonstrates how to install Trivy using the mise version manager. It includes installing the plugin and latest version, setting a global version, and verifying the installation. ```Bash # Install plugin and install latest version mise plugin add trivy mise install trivy # Set a version globally (on your ~/.tool-versions file) mise global trivy latest # Now trivy commands are available trivy --version ``` -------------------------------- ### Install Trivy via Install Script Source: https://trivy.dev/latest/getting-started/installation A convenient method to install Trivy using a provided script that automates the download and installation process from GitHub releases. ```bash curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy-repo/main/install.sh | sh -s -- -b /usr/local/bin v0.47.0 ``` -------------------------------- ### Trivy CLI: Module Install Command Usage Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init Provides specific examples and syntax for using the `trivy module install` command to add new modules to Trivy's configuration. ```bash trivy module install vuln-db-custom trivy module install policy-set-enterprise ``` -------------------------------- ### Trivy Plugin Structure Example Source: https://trivy.dev/latest/docs/plugin/developer-guide Illustrates the basic directory structure for a Trivy plugin, including the required plugin.yaml file and an optional executable script. ```Shell your-plugin/ | |- |-- plugin.yaml |-- your-plugin.sh ``` -------------------------------- ### Trivy CLI: Plugin Info Command Usage Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init Shows how to get detailed information about an installed Trivy plugin, including its version, description, and available commands. ```bash trivy plugin info my-custom-plugin ``` -------------------------------- ### Trivy Plugin Management Commands Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_kubernetes This documentation outlines the commands for managing Trivy plugins, including listing, installing, and getting information about plugins. It covers 'trivy plugin list', 'trivy plugin install', and 'trivy plugin info'. ```bash trivy plugin list ``` ```bash trivy plugin install <plugin-name> ``` ```bash trivy plugin info <plugin-name> ``` -------------------------------- ### Install Trivy Plugins Source: https://trivy.dev/latest/docs/plugin/user-guide Installs Trivy plugins using the `trivy plugin install` command. Supports installation from the plugin index, direct URLs, file paths, and Git repositories with version tags. Trivy uses go-getter for downloads, supporting OCI, local files, Git, HTTP/S, Mercurial, S3, and GCS. ```bash $ trivy plugin install $ trivy plugin install <url> $ trivy plugin install <path> $ trivy plugin install <git-repo>@<version> ``` -------------------------------- ### Install and Run Trivy Plugins On-the-Fly Source: https://trivy.dev/latest/docs/plugin/user-guide The `trivy plugin run` command installs a plugin and executes it immediately. If the plugin is already cached, the installation step is skipped. ```bash trivy plugin run <plugin-name> ``` -------------------------------- ### Install Trivy with asdf Source: https://trivy.dev/latest/getting-started/installation This snippet shows how to install Trivy using the asdf version manager. It includes installing the plugin, setting a global version, and verifying the installation. ```Bash # Install plugin asdf plugin add trivy # Install latest version asdf install trivy # Set a version globally (on your ~/.tool-versions file) asdf global trivy latest # Now trivy commands are available trivy --version ``` -------------------------------- ### Install Trivy with Nix/NixOS Source: https://trivy.dev/latest/getting-started/installation Guidance on installing Trivy using the Nix package manager for Linux and macOS, covering command-line installation and Home Manager configuration. ```bash nix-env --install -A nixpkgs.trivy ``` -------------------------------- ### Trivy Plugins: User Guide Source: https://trivy.dev/latest/docs/configuration/filtering Provides guidance for users on how to install, configure, and utilize Trivy plugins to extend its scanning capabilities. This includes information on available plugins and their specific functionalities. ```bash # Example: Installing a custom plugin trivy plugin install custom-scanner ``` -------------------------------- ### Trivy Plugin Management Commands Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_list This documentation outlines the commands for managing Trivy plugins, including listing, installing, uninstalling, updating, and searching for plugins. It also covers commands for getting information about a plugin and running a plugin. ```CLI trivy plugin info trivy plugin install trivy plugin list trivy plugin run trivy plugin uninstall trivy plugin update trivy plugin upgrade trivy plugin search ``` -------------------------------- ### Tagging Plugin Repositories with Semantic Versioning Source: https://trivy.dev/latest/docs/plugin/developer-guide Instructions on how to tag Git repository releases for Trivy plugins using Semantic Versioning, ensuring compatibility and allowing users to install specific versions. ```bash $v1.2.3 ``` -------------------------------- ### Trivy CLI: Plugin Install Command Reference Source: https://trivy.dev/latest/tutorials/additional-resources/cks This documentation describes the 'trivy plugin install' command, used to install new plugins for Trivy. Plugins can add new scanning capabilities or integrate with external services. ```bash trivy plugin install custom-scanner trivy plugin install --url https://example.com/plugin.tar.gz ``` -------------------------------- ### Trivy CLI - Plugin Install Command Source: https://trivy.dev/latest/getting-started/faq The `trivy plugin install` command is used to install Trivy plugins, which add new scanning capabilities or integrate with external services. ```bash trivy plugin install https://github.com/trivy/plugin-example ``` -------------------------------- ### Trivy CLI: Module Install Command Reference Source: https://trivy.dev/latest/tutorials/additional-resources/cks This documentation describes the 'trivy module install' command, used to download and install Trivy modules, which can extend its functionality or provide custom scanning capabilities. ```bash trivy module install vuln-db trivy module install --all ``` -------------------------------- ### Install Trivy on FreeBSD Source: https://trivy.dev/latest/getting-started/installation This snippet demonstrates how to install Trivy on FreeBSD using the pkg package manager. ```Shell pkg install trivy ``` -------------------------------- ### Install Trivy with Homebrew Source: https://trivy.dev/latest/getting-started/installation Instructions for installing Trivy on macOS and Linux using the Homebrew package manager. ```bash brew install trivy ``` -------------------------------- ### Trivy CLI Plugin Install Example Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin_install This example demonstrates how to install a Trivy plugin named 'custom-scanner'. Ensure the plugin name is correct and available. ```bash trivy plugin install custom-scanner ``` -------------------------------- ### Example: Scan Filesystem from Inside a Container with Trivy Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_rootfs Illustrates scanning a filesystem from within a running container. It starts an Alpine container, installs Trivy inside it, and then runs 'trivy rootfs /' to scan the container's root filesystem. ```bash # Scan from inside a container $ docker run --rm -it alpine:3.11 / # curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin / # trivy rootfs / ``` -------------------------------- ### Trivy CLI: Plugin List Command Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init Lists all installed Trivy plugins. This command helps users manage their installed plugins and check for available updates or verify installation status. It's useful for auditing the Trivy environment. ```bash trivy plugin list ``` -------------------------------- ### Install Trivy on RHEL/CentOS Source: https://trivy.dev/latest/getting-started/installation Instructions for installing Trivy on RHEL and CentOS systems by adding the official Trivy RPM repository configuration. ```bash cat<< EOF | sudo tee -a /etc/yum.repos.d/trivy.repo [trivy] name=Trivy repository baseurl=https://aquasecurity.github.io/trivy-repo/rpm/releases/\$basearch/ gpgcheck=1 enabled=1 gpgkey=https://aquasecurity.github.io/trivy-repo/rpm/public.key EOF sudo yum install -y trivy ``` -------------------------------- ### Trivy CLI: CLI Overview Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo_init A general overview of the Trivy command-line interface, explaining its structure, common commands, and how to get help. ```bash trivy --help trivy image --help trivy fs --help ``` -------------------------------- ### Install Trivy via GitHub Release Source: https://trivy.dev/latest/getting-started/installation Steps to install Trivy from a GitHub release. This involves downloading the appropriate archive for your operating system and architecture, unpacking it, and ensuring the binary has execute permissions. ```bash tar -xzf ./trivy.tar.gz chmod +x ./trivy ``` -------------------------------- ### Trivy CLI Plugin Install SEE ALSO Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin_install This section provides references to related commands or documentation for the Trivy plugin installation process. ```bash # SEE ALSO # trivy plugin list, trivy plugin run ``` -------------------------------- ### Scan PHP Installed JSON with Trivy Source: https://trivy.dev/latest/docs/coverage/language/php This example shows how to scan PHP projects using the 'installed.json' file, which lists installed packages and their versions. Trivy can identify vulnerabilities in these installed PHP packages. ```bash trivy fs --security-checks vuln --scanners vuln --input /path/to/your/php/project/installed.json ``` -------------------------------- ### Trivy Plugin Install Command Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_filesystem Installs a specific Trivy plugin. This command requires the plugin name as an argument. ```bash trivy plugin install <plugin-name> ``` -------------------------------- ### Trivy CLI: Module Install Source: https://trivy.dev/latest/docs/supply-chain/attestation/rekor Installs a Trivy module, which can extend its functionality, for example, by adding custom scanning capabilities or integrating with external data sources. ```bash # Install a Trivy module by name trivy module install <module-name> ``` -------------------------------- ### Trivy CLI Overview Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin_install This command provides an overview of the Trivy command-line interface, listing available commands and their basic usage. ```bash trivy --help ``` -------------------------------- ### Install Trivy with MacPorts Source: https://trivy.dev/latest/getting-started/installation Instructions for installing Trivy on macOS using the MacPorts package manager, with a link to the port details. ```bash sudo port install trivy ``` -------------------------------- ### Trivy FAQ: Air-gapped Environment Source: https://trivy.dev/latest/getting-started/faq Explains how to run Trivy in an air-gapped environment, directing users to a specific resource for detailed instructions. ```English See here for how to run Trivy under an air-gapped environment. ``` -------------------------------- ### Trivy Plugin Management Commands Source: https://trivy.dev/latest/getting-started Illustrates how to manage Trivy plugins using the CLI, including installing, listing, updating, and running plugins. ```bash trivy plugin list trivy plugin install aquasecurity/trivy-plugin-example trivy plugin run trivy-plugin-example --input /path/to/scan ``` -------------------------------- ### Trivy Config Command Example Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_filesystem Demonstrates the use of the 'trivy config' command, likely for managing Trivy's configuration settings or applying configurations to scans. ```bash trivy config ``` -------------------------------- ### Trivy General Usage Examples Source: https://trivy.dev/latest/getting-started Demonstrates common Trivy commands for scanning container images, filesystems, and Kubernetes clusters. These examples showcase basic scanning operations and common flags. ```bash trivy image alpine:latest trivy fs /path/to/your/app trivy k8s --all-namespaces ``` -------------------------------- ### Trivy CLI: Plugin Management Source: https://trivy.dev/latest/docs/configuration/db Commands for managing Trivy plugins, including listing, installing, and getting information about available plugins. Plugins add new scanning capabilities. ```bash trivy plugin trivy plugin info trivy plugin list trivy plugin install ``` -------------------------------- ### Scan Kubernetes Cluster with Trivy Source: https://trivy.dev/latest/docs/target/container_image This guide covers scanning Kubernetes clusters for security vulnerabilities and misconfigurations. It explains how to target cluster resources and provides examples for different scanning scenarios. ```Shell # Example command to scan a Kubernetes cluster trivy k8s --cluster <cluster-name> ``` -------------------------------- ### Serve Trivy Documentation Locally Source: https://trivy.dev/latest/community/contribute/pr Build the documentation and serve it locally at http://localhost:8000 for preview. ```Shell $ mage docs:serve ``` -------------------------------- ### Install Trivy on OpenSUSE Source: https://trivy.dev/latest/getting-started/installation Details for installing Trivy on OpenSUSE systems using the OpenSUSE Package Repository, including a reference to the package details page. ```bash sudo zypper install trivy ``` -------------------------------- ### Trivy CLI Plugin Management Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_module This documentation outlines the commands for managing Trivy plugins via the CLI. It covers how to get information about plugins, install, list, run, uninstall, and update them. ```bash trivy plugin --help trivy plugin info <plugin-name> trivy plugin install <plugin-name> trivy plugin list trivy plugin run <plugin-name> [args...] trivy plugin uninstall <plugin-name> trivy plugin update <plugin-name> ``` -------------------------------- ### Trivy Plugin Management Source: https://trivy.dev/latest/docs/coverage/os/ubuntu Documentation on how to manage Trivy plugins, including commands to list, install, uninstall, and get information about available plugins. This allows extending Trivy's functionality. ```bash trivy plugin info --help trivy plugin install --help trivy plugin list --help trivy plugin uninstall --help trivy plugin run --help ``` -------------------------------- ### Trivy CLI Plugin Management Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin Commands for managing Trivy plugins, including installing, uninstalling, listing, updating, and getting information about plugins. These commands are essential for extending Trivy's functionality. ```bash trivy plugin list trivy plugin install <plugin-name> trivy plugin uninstall <plugin-name> trivy plugin update trivy plugin info <plugin-name> ``` -------------------------------- ### Trivy CLI: Plugin Management Source: https://trivy.dev/latest/community/maintainer/backporting This section details the command-line interface commands for managing Trivy plugins. It covers listing, installing, uninstalling, updating, and searching for plugins, as well as getting information about them. ```bash trivy plugin list trivy plugin install <plugin-name> trivy plugin uninstall <plugin-name> trivy plugin update trivy plugin search <keyword> trivy plugin info <plugin-name> trivy plugin upgrade ``` -------------------------------- ### Start Trivy Server Source: https://trivy.dev/latest/docs/references/modes/client-server Starts the Trivy server listening on a specified host and port, requiring an authentication token for secure operation. ```bash trivy server --listen localhost:8080 --token dummy ``` -------------------------------- ### Trivy CLI Configuration Options Source: https://trivy.dev/latest/getting-started/installation Lists common Trivy CLI commands for managing configuration, cleaning cache, and converting reports. ```Shell # Example: Clean Trivy cache trivy config --cache-clean # Example: Convert report format trivy convert --input report.json --output report.sarif --format sarif ``` -------------------------------- ### Trivy Plugin Management Source: https://trivy.dev/latest/docs/coverage/os/debian This documentation covers the management of Trivy plugins, including commands to get information about plugins, install, list, run, and uninstall them. It's essential for extending Trivy's functionality. ```bash trivy plugin info --help trivy plugin install --help trivy plugin list --help trivy plugin run --help trivy plugin uninstall --help ``` -------------------------------- ### Trivy Plugin Management Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy Provides examples of how to manage Trivy plugins using the CLI, including installing, listing, updating, and running plugins. Plugins extend Trivy's functionality for custom scanning or reporting needs. ```bash trivy plugin list trivy plugin install aquasecurity/trivy-plugin-example trivy plugin run trivy-plugin-example --input /path/to/file ``` -------------------------------- ### Trivy Module Management Commands Source: https://trivy.dev/latest/getting-started Shows how to manage Trivy modules, including installing and uninstalling them. ```bash trivy module install trivy module uninstall ``` -------------------------------- ### Trivy Plugin Management Source: https://trivy.dev/latest/tutorials/kubernetes/cluster-scanning This documentation covers the management of Trivy plugins, including how to list available plugins, install new ones, get information about a specific plugin, run a plugin, and update or uninstall existing plugins. ```Shell trivy plugin list trivy plugin info <plugin-name> trivy plugin install <plugin-name> trivy plugin run <plugin-name> [args...] trivy plugin update trivy plugin upgrade trivy plugin uninstall <plugin-name> ``` -------------------------------- ### List Trivy Plugins Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin_install This command lists all available Trivy plugins. It helps users discover and manage installed plugins. ```bash trivy plugin list ``` -------------------------------- ### Trivy Plugin Management Source: https://trivy.dev/latest/docs/scanner/misconfiguration/custom/contribute-checks This documentation outlines the commands for managing Trivy plugins, including listing available plugins, installing, uninstalling, updating, and searching for plugins. It also covers how to get information about a specific plugin and run it. ```cli trivy plugin list trivy plugin install <plugin-name> trivy plugin uninstall <plugin-name> trivy plugin update trivy plugin search <keyword> trivy plugin info <plugin-name> trivy plugin run <plugin-name> ``` -------------------------------- ### Trivy Kubernetes Scan Example Source: https://trivy.dev/latest/docs/target/kubernetes A basic example of invoking the Trivy command, likely for a default Kubernetes scan. This demonstrates the simplest way to initiate a scan. ```bash trivy ``` -------------------------------- ### Trivy CLI Usage Examples Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy Demonstrates common command-line interface (CLI) usage patterns for Trivy, including scanning container images, filesystems, and Kubernetes clusters. These examples showcase basic commands and options for initiating scans. ```bash trivy image alpine:latest trivy fs /path/to/your/app trivy k8s --namespace default cluster ``` -------------------------------- ### Trivy Plugin Management Commands Source: https://trivy.dev/latest/docs/coverage/os/minimos This snippet details the Trivy CLI commands for managing plugins, including listing available plugins, installing, uninstalling, updating, and running them. It also covers commands for getting information about specific plugins. ```bash trivy plugin --help trivy plugin info --help trivy plugin install --help trivy plugin list --help trivy plugin run --help trivy plugin uninstall --help trivy plugin update --help trivy plugin upgrade --help ``` -------------------------------- ### Run Trivy Server Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_server This snippet shows the basic command to run the Trivy server. It starts the server in its default configuration. ```bash trivy server [flags] ``` -------------------------------- ### Trivy Scan Results for pom.xml Source: https://trivy.dev/latest/docs/references/modes/client-server This example shows the output of a Trivy scan on a pom.xml file, listing detected vulnerabilities. It includes the library name, vulnerability ID, severity, installed version, fixed version, and a brief title for each vulnerability. ```text pom.xml (pom) ============= Total: 24 (CRITICAL: 24) +---------------------------------------------+------------------+----------+-------------------+--------------------------------+---------------------------------------+ | LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE | +---------------------------------------------+------------------+----------+-------------------+--------------------------------+---------------------------------------+ | com.fasterxml.jackson.core:jackson-databind | CVE-2017-17485 | CRITICAL | 2.9.1 | 2.8.11, 2.9.4 | jackson-databind: Unsafe | | | | | | | deserialization due to | | | | | | | incomplete black list (incomplete | | | | | | | fix for CVE-2017-15095)... | | | | | | -->avd.aquasec.com/nvd/cve-2017-17485 | + +------------------+ + +--------------------------------+---------------------------------------+ | | CVE-2018-11307 | | | 2.7.9.4, 2.8.11.2, 2.9.6 | jackson-databind: Potential | | | | | | | information exfiltration with | | | | | | | default typing, serialization | | | | | | | gadget from MyBatis | | | | | | | -->avd.aquasec.com/nvd/cve-2018-11307 | + +------------------+ + +--------------------------------+---------------------------------------+ | | CVE-2018-14718 | | | 2.6.7.2, 2.9.7 | jackson-databind: arbitrary code | | | | | | | execution in slf4j-ext class | | | | | | | -->avd.aquasec.com/nvd/cve-2018-14718 | + +------------------+ + + +---------------------------------------+ | | CVE-2018-14719 | | | | jackson-databind: arbitrary | | | | | | | code execution in blaze-ds-opt | | | | | | | and blaze-ds-core classes | | | | | | | -->avd.aquasec.com/nvd/cve-2018-14719 | + +------------------+ + + +---------------------------------------+ | | CVE-2018-14720 | | | | jackson-databind: exfiltration/XXE | | | | | | | in some JDK classes | | | | | | | -->avd.aquasec.com/nvd/cve-2018-14720 | + ``` -------------------------------- ### Use Wildcards in Trivy Ignore Rules (Terraform) Source: https://trivy.dev/latest/docs/scanner/misconfiguration/config/config This example illustrates the use of wildcards in Trivy ignore rules for Terraform. The rule `# trivy:ignore:aws-s3-*:ws:dev-*` ignores all checks starting with `aws-s3-` for workspaces matching the pattern `dev-*`, providing flexible exclusion patterns. ```HCL # trivy:ignore:aws-s3-*:ws:dev-* ``` -------------------------------- ### Trivy CLI Commands Reference Source: https://trivy.dev/latest/docs/coverage/iac/terraform This section lists various command-line interface (CLI) commands for Trivy, including options for cleaning, configuration, converting formats, scanning filesystems, images, Kubernetes resources, and managing modules and plugins. It details how to install, uninstall, and get information about plugins. ```CLI trivy clean trivy config trivy convert trivy filesystem trivy image trivy kubernetes trivy module trivy module install trivy module uninstall trivy plugin trivy plugin info trivy plugin install ``` -------------------------------- ### Install Trivy on Arch Linux Source: https://trivy.dev/latest/getting-started/installation Information on installing Trivy on Arch Linux via the community package repository, with references to the Arch Linux package details and PKGBUILD. ```bash sudo pacman -S trivy ``` -------------------------------- ### Trivy CLI Configuration Commands Source: https://trivy.dev/latest/getting-started Provides examples of using Trivy's command-line interface (CLI) for managing configurations, including cleaning the cache and converting scan results. ```bash trivy config --reset trivy convert --input results.json --output results.sarif ``` -------------------------------- ### Install Trivy on Debian/Ubuntu Source: https://trivy.dev/latest/getting-started/installation Steps to install Trivy on Debian and Ubuntu systems by adding the official Trivy APT repository and its GPG key. ```bash sudo apt-get install wget apt-transport-https://aquasecurity.github.io/trivy-repo/deb/public.key -O /usr/share/keyrings/trivy.gpg echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" | sudo tee -a /etc/apt/sources.list.d/trivy.list sudo apt-get update sudo apt-get install trivy ``` -------------------------------- ### Trivy CLI Plugin Install Options Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_plugin_install This shows the available options when installing a Trivy plugin, such as specifying a version or a source URL. ```bash trivy plugin install --version 1.2.3 --source https://example.com/plugin.tar.gz ``` -------------------------------- ### Install a Trivy Module Source: https://trivy.dev/latest/docs/advanced/modules Demonstrates how to install a WebAssembly module for Trivy using the `trivy module install` command. It specifies the command to download and install modules into the Trivy cache, adhering to XDG specifications for cache location. ```bash $ trivy module install <url> ``` -------------------------------- ### Trivy CLI: Plugin Install Command Source: https://trivy.dev/latest/docs/configuration/others The 'trivy plugin install' command is used to install plugins that extend Trivy's capabilities, such as custom scanners or reporting formats. This command requires the name or path of the plugin to be installed. ```bash trivy plugin install <plugin-name-or-path> ``` -------------------------------- ### Trivy Filesystem Scan Example Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_filesystem Demonstrates how to perform a filesystem scan using the Trivy CLI. This command scans the specified directory for vulnerabilities and misconfigurations. ```bash trivy filesystem /path/to/your/filesystem ``` -------------------------------- ### Trivy Module Install Command Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_module_install This snippet shows the basic command structure for installing a Trivy module. It specifies the repository from which the module should be installed. ```bash trivy module install [flags] REPOSITORY ``` -------------------------------- ### Trivy CLI Examples Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy Demonstrates practical usage of the Trivy CLI for common security scanning tasks. Examples cover scanning container images directly, from tar archives, local file systems, and initiating the server mode. ```bash # Scan a container image $ trivy image python:3.4-alpine # Scan a container image from a tar archive $ trivy image --input ruby-3.1.tar # Scan local filesystem $ trivy fs . # Run in server mode $ trivy server ``` -------------------------------- ### Build a Trivy Module (Go) Source: https://trivy.dev/latest/docs/advanced/modules Provides an overview of building Trivy modules using Go. It outlines key steps such as initializing a module, defining interfaces for analyzers and post-scanners, and the build process. ```Go // Initialize your module // Module interface // Analyzer interface // PostScanner interface // Build ``` -------------------------------- ### Trivy CLI: Plugin Install Command Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex The 'trivy plugin install' command is used to install plugins that extend Trivy's scanning capabilities. These plugins can add support for new languages, frameworks, or security checks. Installation typically involves specifying the plugin name or a repository URL. ```bash trivy plugin install misconf trivy plugin install https://github.com/aquasecurity/trivy-plugin-template ``` -------------------------------- ### Launch Trivy Server Source: https://trivy.dev/latest/docs/references/modes/client-server Starts the Trivy server, which automatically downloads and updates the vulnerability database. It listens on the specified address and port. To accept external connections, use '0.0.0.0' instead of 'localhost'. ```bash $ trivy server --listen localhost:8080 2019-12-12T15:17:06.551+0200 INFO Need to update DB 2019-12-12T15:17:56.706+0200 INFO Reopening DB... 2019-12-12T15:17:56.707+0200 INFO Listening localhost:8080... ``` ```bash $ trivy server --listen 0.0.0.0:8080 ``` -------------------------------- ### Trivy VEX Repo Command Options Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo Provides common options for the 'trivy vex repo' command, including help flags and configuration settings. ```bash trivy vex repo -h, --help ``` -------------------------------- ### Trivy Module Install Options Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_module_install This snippet lists the specific options available for the 'trivy module install' command, including a help flag. ```bash -h, --help help for install ``` -------------------------------- ### Trivy CLI: Module Uninstall Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_server Uninstalls a previously installed Trivy module. This helps in managing installed extensions and freeing up resources. Use the exact module name as installed. ```bash trivy module uninstall github.com/owner/repo/module ``` -------------------------------- ### Trivy CLI: Plugin Install Command Source: https://trivy.dev/latest/docs/scanner/misconfiguration/custom/schema The 'trivy plugin install' command allows users to install third-party plugins that extend Trivy's functionality. These plugins can add support for new languages, scanners, or reporting formats. Installation typically involves providing the plugin's name or a URL. ```bash trivy plugin install trivy-plugin-example ``` -------------------------------- ### Trivy Registry Login Example Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_registry_login An example demonstrating how to log in to a registry by piping a password from a file to the 'trivy registry login' command using the '--password-stdin' flag. This is a secure way to provide credentials. ```bash cat ~/my_password.txt | trivy registry login --username foo --password-stdin reg.example.com ``` -------------------------------- ### Install Trivy Plugin Source: https://trivy.dev/latest/tutorials/integrations/aws-security-hub This command installs a Trivy plugin. Ensure you have Trivy installed and the plugin name is correct. This is useful for extending Trivy's functionality with custom scanners or integrations. ```bash trivy plugin install <plugin-name> ``` -------------------------------- ### Trivy CLI: Plugin List Source: https://trivy.dev/latest/tutorials/integrations/travis-ci Lists all installed Trivy plugins. This command helps you manage your installed plugins and check their versions. It's useful for verifying that plugins have been installed correctly. ```bash trivy plugin list ``` -------------------------------- ### List VEX Repositories Source: https://trivy.dev/latest/docs/references/configuration/cli/trivy_vex_repo Lists all configured VEX repositories. This command helps in viewing the current VEX repository setup. ```bash trivy vex repo list ``` -------------------------------- ### Example go.mod File Structure Source: https://trivy.dev/latest/docs/coverage/language/golang An example of a `go.mod` file, showing the module declaration, the Go version used, and the project's dependencies. Trivy parses this file to identify project modules and their versions for scanning. ```go module github.com/aquasecurity/trivy go 1.18 require ( github.com/CycloneDX/cyclonedx-go v0.5.0 ... ) ``` -------------------------------- ### Trivy CLI - Module Install Command Source: https://trivy.dev/latest/getting-started/faq The `trivy module install` command is used to install Trivy modules, which extend its functionality. Modules can provide custom scanning logic or integrations. ```bash trivy module install /path/to/module.tar.gz ``` -------------------------------- ### Trivy CLI: Module Install Command Source: https://trivy.dev/latest/docs/advanced/modules The 'module install' command is used to download and install Trivy modules, which extend Trivy's scanning capabilities with custom logic or data. ```bash trivy module install custom-analyzer ``` -------------------------------- ### Trivy CLI: Plugin Install Source: https://trivy.dev/latest/docs/coverage/others This command installs a Trivy plugin, which can add new scanning capabilities or modify existing ones. Plugins are typically distributed as archives and need to be installed before they can be used. ```bash trivy plugin install ./my-custom-scanner.tar.gz ```
