Сканер Trivy

• The All-in-One Security Scanner
• https://cisoclub.ru/skaner-uyazvimostej-docker-kontejnerov-trivy/

• https://github.com/aquasecurity/trivy/tags

$ docker run --rm aquasec/trivy image nginx

$ time docker run --rm -v $HOME/.cache/:/root/.cache/ aquasec/trivy image nginx

$ docker run --rm -v $HOME/.cache/:/root/.cache/ aquasec/trivy --insecure image gitlab.corp13.un:5000/student/pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy image gitlab.corp13.un:5000/student/pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy image pywebd

$ docker run --rm -v $HOME/.cache/:/root/.cache/ \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v $(pwd)/.trivyignore:/work/.trivyignore -w /work/ \
  aquasec/trivy --exit-code 1 image pywebd && echo OK || echo Problems

$ TR_VER=0.69.2

$ wget https://github.com/aquasecurity/trivy/releases/download/v${TR_VER}/trivy_${TR_VER}_Linux-64bit.deb

# dpkg -i trivy_${TR_VER}_Linux-64bit.deb

# trivy image pywebd