Security Scanning in your CI/CD pipeline through GitHub Actions with Trivy

This video showcases how you can integrate Trivy security scanning in your CI/CD pipeline:
* filesystem scanning
* container image scanning
* Helm chart misconfiguration scanning
Resources 📚
The projects are available on GitHub: github.com/aqu...
Join our Slack community: slack.aquasec.com
⭐Give our projects a star on GitHub⭐

[@morikuldip526]

This is great ;D

[@saurabhghodki9799]

Hey, a very informative demo. I have got a question, is trivy a better solution than docker scout? Is there any comparison available for these two tools?

[@AquaSecOSS]

Hi there, thank you for the question -- both are different tools. Both will give you suggestions on how to implement a fix however, Trivy is more comprehensive too. You can apply more filters to the CVE output e.g. docs aquasecurity.github.io/trivy/latest/docs/configuration/filtering/
Another benefit of Trivy is that you can not only scan container images but also other development resources to improve the security of your entire software supply chain.
Additionally, Trivy and Docker Scout take a slightly different approach to vulnerability scanning. Trivy is also a completely open source tool with a large community of Developers around it that make suggestions daily on how we can improve it.
In the end, it will depend on your personal project needs and preferences.

[@franciscoparraguez2923]

Si o si necesito la suscripción de escaneo de codigo en github?