Home › Tool guides › Trivy (containers and dependencies)
Security toolsTrivy (containers and dependencies)
Scans container images, filesystems and IaC for known vulnerabilities, secrets and misconfigurations.
Official site: trivy.dev/
Licence: Free (Apache-2.0)
With Odoo
- Rebuild images regularly to pick up patched base layers.
- Secrets found in the repo must be rotated.
The full room (install, configure, use, troubleshooting, management and a hands-on checklist) is in the academy.