Last Updated: November 21, 2025
Focus Areas
| Focus |
|---|
Scan images against vulnerability feeds
|
Generate SBOMs and store them with artifacts
|
Commands & Queries
trivy image my-app:latest
Run vulnerability scan
grype my-app:latest
Alternative scanner
syft my-app:latest -o json > sbom.json
Produce SBOM
Summary
Automate scanning, keep SBOMs versioned, and block builds on high severity issues.
💡 Pro Tip:
Fail builds on critical CVEs and refresh scanners monthly.