domains / families / security / trivy-offline-vulnerability-scanning

trivy-offline-vulnerability-scanning

separate

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.

When to use

• setting up offline scanning
• executing Trivy against package lock files
• generating JSON vulnerability reports
• scanning in air-gapped environments
• reproducible security audits
• scanning dependency lock files

When not to use

• online scanning
• scanning container images
• scanning filesystems
• misconfiguration scanning

Skill page

Source