Control: retitle -1 ITP: trivy -- comprehensive and versatile security scanner Control: owner -1 Juan Manuel Méndez Rey <[email protected]>
* Package name : trivy Version : 0.76.1 Upstream Contact: https://github.com/aquasecurity/trivy/issues * URL : https://trivy.dev * License : Apache-2.0 Programming Lang: Go Description : comprehensive and versatile security scanner Trivy has scanners that look for security issues, and targets where it can find those issues. . Targets (what Trivy can scan): - Container Image - Filesystem - Git Repository (remote) - Virtual Machine Image - Kubernetes . Scanners (what Trivy can find there): - OS packages and software dependencies in use (SBOM) - Known vulnerabilities (CVEs) - IaC issues and misconfigurations - Sensitive information and secrets - Software licenses Source: https://github.com/aquasecurity/trivy (moved from knqyf263/trivy). The license is now Apache-2.0, not AGPL-3 as in the original report. I will maintain it in the Debian Go Packaging Team. 20 Go modules that trivy uses outside its tests are not in Debian yet. go-getter is in NEW, and I will package the others separately, each with its own ITP.
