trivy

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

🧵 CLI tool for directly patching container images!

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

ValidKube combines the best open-source tools to help ensure Kubernetes YAML best practices, hygiene & security.

🧹 Cleaning up images from Kubernetes nodes

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

Import Helm Charts to OCI registries, optionally with vulnerability patching

Vulnerability scanning just got lazier

A set of curated exercises to help you prepare for the CKS exam

m9sweeper is a free and easy kubernetes security platform.

Use Trivy as a plug-in vulnerability scanner in the Harbor registry

Web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive data table.

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

Implementing End-to-End CI/CD, IaC, and Monitoring using Kubernetes, GitOps (Argo CD), GitHub Actions, Terraform, AWS EKS, Prometheus, Grafana, and Kubecost.

🚀 DevOps intro elective — 10 hands-on labs + 2 bonus building QuickNotes end-to-end: Git internals, CI/CD with GitHub Actions, OS & networking, Vagrant VMs, Docker, Ansible, golden-signal monitoring, Trivy + ZAP scanning, and free-tier cloud deployment.

Udemy Course on DevSecOps

Trivy Operator Dashboard: A comprehensive tool for Trivy Operator. Offers various dashboards and interactive pages where you can browse and inspect Trivy Reports. Built with C#, .NET 10 (backend), Angular 21, and Node.js 24 (frontend).

A lightweight, Go-based VPS monitoring solution with real-time web dashboard supporting multiple agents. Monitor unlimited servers from a single dashboard overview analytics.

🚀 DevSecOps intro elective — 10 hands-on labs + 2 bonus hardening OWASP Juice Shop: threat modeling (STRIDE/Threagile), signed commits & secret scanning, SBOM/SCA, SAST + DAST, IaC security (Checkov/KICS), container & supply-chain hardening (Trivy, Cosign), runtime detection with Falco, and DefectDojo vuln management.