Trivy

Trivy is an open-source, all-in-one security scanner developed by Aqua Security that detects vulnerabilities, misconfigurations, secrets, and SBOM issues in container images, filesystems, Git repositories, and Kubernetes clusters. Its breadth of coverage (OS packages, language packages, IaC files, Dockerfiles) and ease of integration make it one of the most widely adopted open-source security scanning tools in CI/CD pipelines.