thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Trivy

An open-source security scanner from Aqua Security for container images, file systems, Git repositories, Kubernetes and IaC.

Definition

Trivy detects vulnerable packages, misconfigurations (it absorbed tfsec), exposed secrets and license issues and can generate SBOMs. It is commonly integrated into CI pipelines and Kubernetes operators.

Example

A pipeline step runs Trivy against the built image and fails on critical vulnerabilities with available fixes.

Exam tip

A multi-purpose scanner: images, IaC misconfigurations, secrets and SBOMs.

Related terms