User Tools

Site Tools


сканер_trivy

This is an old revision of the document!


Сканер Trivy

$ docker run --rm aquasec/trivy image nginx
  или
$ docker run --rm aquasec/trivy:0.69.3 image nginx
  или
$ docker run --rm ghcr.io/aquasecurity/trivy image nginx

$ time docker run --rm -v $HOME/.cache/:/root/.cache/ ghcr.io/aquasecurity/trivy image nginx
$ docker run --rm -v $HOME/.cache/:/root/.cache/ ghcr.io/aquasecurity/trivy --insecure image gitlab.corpX.un:5000/student/pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/aquasecurity/trivy image gitlab.corpX.un:5000/student/pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/aquasecurity/trivy image pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v $(pwd)/.trivyignore:/work/.trivyignore -w /work/ \
  ghcr.io/aquasecurity/trivy --exit-code 1 image pywebd && echo OK || echo Problems
  
~/pywebd# cat .trivyignore
CVE-2026-22184
#CVE-2026-27171
$ TR_VER=0.69.2

$ wget https://github.com/aquasecurity/trivy/releases/download/v${TR_VER}/trivy_${TR_VER}_Linux-64bit.deb

# dpkg -i trivy_${TR_VER}_Linux-64bit.deb

# trivy image pywebd
сканер_trivy.1775823322.txt.gz · Last modified: 2026/04/10 15:15 by val