domains / families / security / scanning-containers-with-trivy-in-cicd

scanning-containers-with-trivy-in-cicd

separate

'Integrates Aqua Security''s Trivy scanner into CI/CD pipelines to detect

When to use

• When building Docker container images in CI/CD and needing automated vulnerability scanning before registry push
• When establishing quality gates that prevent images with critical or high CVEs from reaching production
• When compliance requirements mandate vulnerability scanning of all container images before deployment
• When scanning IaC files (Dockerfiles, Kubernetes manifests) alongside container image scanning
• When needing a single tool to scan OS packages, language-specific dependencies, and misconfigurations

When not to use

• runtime container security monitoring
• scanning running containers in production
• scanning application source code without containerization

Skill page

Source