#Trivy

More and more often popular software packages are compromised, leading to stolen api keys, tokens,...

Two weeks of replacing dependencies one by one barely changed our dependency list. Removing one integration layer cut the scanner binary from 106.6 MB to 34.1 MB. Here's how, and how we tested it.

Hardening CI/CD Against CA Key Compromise: Dissecting Trivy v0.76.1 and Go Trust Stores In...

PHP2Shell (CVE-2026-109618, CVE-2026-109619) as seen from a Kubernetes cluster: how fast the scanners caught up, where they stay blind, and why rebuilding the image is only half of remediation.

Most production Docker images are security debt waiting to be called in. The average enterprise container image carries 200+ known vulnerabilities. About 15% of those are critical or high severity.…

A recent scan of 1,200 Laravel projects on GitHub showed that 42% shipped Docker images with at least...

From Dev.to - cybersecurity: Vuls vs Trivy vs Grype: when to pick which CVE scanner (from the team that built one more)

From Dev.to - security: Why Fixed Container Image Versions Matter: Lessons from the Trivy Supply Chain Attack

From Dev RSS Feed: Trivy deep dive Snyk: The Definitive Guide to container scanning for Engineers

From Dev.to - security: How to Automate Security Patches with Dependabot 0.300 and Trivy 0.50 2026

From Dev.to - security: Deep Dive: How AWS Security Hub 3.0 Aggregates Findings From Snyk 1.1300 and Trivy 0.50 for 2026 Compliance

From Dev.to - security: Tutorial: How to Implement Security Scanning in GitLab CI 16.8 with Trivy 0.50 and Grype 0.70

From Dev.to - devsecops: Hot Take: DevSecOps Is Dead Without Trivy 0.50 and Snyk 1.120, 2026 Study Finds 60% More Vulnerabilities

From Dev.to - security: Retrospective: Implementing Zero-Trust Security for Docker 28 Containers – 1 Year of Trivy 0.55 and Vault 1.18

From Dev.to - security: AI Model Security: Comparing Falco 0.40 vs Trivy 0.50 for Detecting Vulnerable LLM Dependencies

In Q3 2024, our 12-person platform engineering team reduced confirmed security incidents by 41.7%...

From Dev.to - kubernetes: How to Fix Kubernetes 1.32 ImagePullBackOff Errors with Trivy 0.50 and ECR

From Dev.to - github: How to Use Trivy 0.50 and GitHub Actions 2026 to Block Vulnerable Dependencies in Rust 1.85 Crates

From Dev.to - devsecops: Why Your DevSecOps Pipeline Is Broken: Trivy 0.50 Catches 30% More Vulnerabilities Than Snyk

From Dev.to - docker: War Story: I Deployed a Broken Docker Image to Production and How I Fixed It with Trivy 0.50 and Harbor 2.10