diff --git a/docs/docs/references/configuration/cli/trivy.md b/docs/docs/references/configuration/cli/trivy.md index 0f4faaecde0c..a835d5fb5c84 100644 --- a/docs/docs/references/configuration/cli/trivy.md +++ b/docs/docs/references/configuration/cli/trivy.md @@ -24,6 +24,9 @@ trivy [global flags] command [flags] target # Run in server mode $ trivy server + # Scan an image and only show HIGH or CRITICAL vulnerabilities + $ trivy image --severity HIGH,CRITICAL alpine:3.19 + ``` ### Options diff --git a/docs/docs/references/configuration/cli/trivy_repository.md b/docs/docs/references/configuration/cli/trivy_repository.md index 8bfb9baed759..6145e7f0c08d 100644 --- a/docs/docs/references/configuration/cli/trivy_repository.md +++ b/docs/docs/references/configuration/cli/trivy_repository.md @@ -13,6 +13,12 @@ trivy repository [flags] (REPO_PATH | REPO_URL) $ trivy repo https://github.com/knqyf263/trivy-ci-test # Scan your local git repository $ trivy repo /path/to/your/repository + # Scan your current working directory (local git repository) + $ trivy repo . + # Scan a specific branch of a remote repository + $ trivy repo --branch develop https://github.com/knqyf263/trivy-ci-test + # Scan a repository at a specific commit + $ trivy repo --commit https://github.com/knqyf263/trivy-ci-test ``` ### Options diff --git a/docs/ecosystem/cicd.md b/docs/ecosystem/cicd.md index d391402b4ffc..57d531b49f2d 100644 --- a/docs/ecosystem/cicd.md +++ b/docs/ecosystem/cicd.md @@ -12,49 +12,48 @@ Trivy has a "Azure Devops Pipelines Task" for Trivy, that lets you easily introd ### trivy-action (Official) -GitHub Action for integrating Trivy into your GitHub pipeline - +GitHub Action for integrating Trivy into your GitHub pipeline +🔗 Example workflows for scanning filesystems, images, and repositories are available in the [Trivy Action README](https://github.com/aquasecurity/trivy-action#usage). 👉 Get it at: ### trivy-action (Community) -GitHub Action to scan vulnerability using Trivy. If vulnerabilities are found by Trivy, it creates a GitHub Issue. - +GitHub Action to scan vulnerability using Trivy. If vulnerabilities are found by Trivy, it creates a GitHub Issue. +🔗 Setup and usage examples can be found on the [GitHub Marketplace page](https://github.com/marketplace/actions/trivy-action). 👉 Get it at: ### trivy-github-issues (Community) -In this action, Trivy scans the dependency files such as package-lock.json and go.sum in your repository, then create GitHub issues according to the result. - +In this action, Trivy scans the dependency files such as package-lock.json and go.sum in your repository, then create GitHub issues according to the result. +🔗 Configuration details and usage can be seen on the [Marketplace listing](https://github.com/marketplace/actions/trivy-github-issues). 👉 Get it at: ## Buildkite Plugin (Community) -The trivy buildkite plugin provides a convenient mechanism for running the open-source trivy static analysis tool on your project. - +The trivy buildkite plugin provides a convenient mechanism for running the open-source trivy static analysis tool on your project. +🔗 Example pipeline snippets are available in the [plugin repository](https://github.com/equinixmetal-buildkite/trivy-buildkite-plugin). 👉 Get it at: https://github.com/equinixmetal-buildkite/trivy-buildkite-plugin ## Dagger (Community) [Dagger](https://dagger.io/) is CI/CD as code that runs anywhere. -The Dagger module for Trivy provides functions for scanning container images from registries as well as Dagger Container objects from any Dagger SDK (e.g. Go, Python, Node.js, etc). - +The Dagger module for Trivy provides functions for scanning container images from registries as well as Dagger Container objects from any Dagger SDK (e.g. Go, Python, Node.js, etc). +🔗 Example usage and setup instructions can be found on the [Daggerverse module page](https://daggerverse.dev/mod/github.com/jpadams/daggerverse/trivy). 👉 Get it at: - ## Semaphore (Community) [Semaphore](https://semaphore.io/) is a CI/CD service. -You can use Trivy in Semaphore for scanning code, containers, infrastructure, and Kubernetes in Semaphore workflow. - +You can use Trivy in Semaphore for scanning code, containers, infrastructure, and Kubernetes in Semaphore workflow. +🔗 Official recipe and usage guide is available in the [Semaphore Docs](https://docs.semaphore.io/using-semaphore/recipes/trivy). 👉 Get it at: ## CircleCI (Community) [CircleCI](https://circleci.com/) is a CI/CD service. -You can use the Trivy Orb for Circle CI to introduce security scanning into your workflow. - -👉 Get it at: +You can use the Trivy Orb for Circle CI to introduce security scanning into your workflow. +🔗 Configuration examples and reference available in the [Orb documentation](https://circleci.com/developer/orbs/orb/fifteen5/trivy-orb). +👉 Get it at: Source: ## Woodpecker CI (Community)