Trivy

Repository Commands

Scan Git repositories for vulnerabilities, secrets, and misconfigurations in code.

4 commands

Pro Tips

Use --scanners secret to find hardcoded credentials

$ trivy repo https://github.com/user/repo

Scan a remote Git repository.

$ trivy repo --scanners secret https://github.com/user/repo

Scan repository for secrets.

$ trivy repo --branch develop https://github.com/user/repo

Scan a specific branch.

$ trivy repo --commit abc123 https://github.com/user/repo

Scan at specific commit.