Trivy

Kubernetes Commands

Scan live Kubernetes clusters for vulnerabilities, misconfigurations, and exposed secrets.

5 commands

Pro Tips

Use --namespace to limit scanning scope

Requires kubeconfig access to the cluster

$ trivy k8s --report summary cluster

Scan entire Kubernetes cluster.

$ trivy k8s --namespace default all

Scan specific namespace.

$ trivy k8s --report all deployments,pods

Scan specific resource types.

$ trivy k8s --compliance k8s-nsa cluster

Run NSA K8s hardening compliance.

$ trivy k8s --context=prod-cluster all

Scan using specific kubeconfig context.