Aqua Security Trivy

Version updated for https://github.com/aquasecurity/trivy-action to version 0.35.0.

  • This publisher is shown as ‘verified’ by GitHub.
  • This action is used across all versions by 39,048 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The “Trivy Action” GitHub Action integrates the Trivy vulnerability scanner into CI/CD pipelines, automating the detection of security issues in container images, file systems, Git repositories, Infrastructure as Code, and more. It simplifies vulnerability scanning by providing seamless configuration, caching, and integration with GitHub Code Scanning, helping developers identify and address critical security risks efficiently. Key capabilities include support for custom configurations, SBOM generation, and scanning private registries.

Release notes

What’s Changed

Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.34.2...0.35.0