Tag: #trivy
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 8 posts
8 posts are tagged #trivy; the most recent was published on 2026-09-10.
Often tagged together: #sbom 6 #container-security 5 #sigstore 4 #docker 3 #english 3
Most read in the last 90 days:
- Container & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime)
- Static Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive
- Container & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive
Scanning the production image with Trivy — 768 findings, and the real work was three packages and one Dockerfile line
From a signature-verification bypass in the login library (CVE-2026-27962) to a digest-pinned base image that could never receive OS security fixes. The scanner counting itself, false positives in secret detection, and a
2026-09-10 · 6 min read #security#cve#trivy#docker#pythonHow to Read Container Image Vulnerability Scan Results — The Real Way to Turn Hundreds of Criticals Into Zero
Run an image scanner for the first time and you get thousands of vulnerabilities, a good number of them Critical. Hand that report to the team as is and nothing happens. This post starts from the fact that all a scanner
2026-07-26 · 13 min read #security#container#docker#trivy#kubernetesContainer & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigContainer & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive ♪ Listenable
A complete map of the container and Kubernetes security scanning ecosystem as of May 2026. Covers image vulnerability scanners (Trivy 0.58, Grype, Syft, Clair v4, Snyk Container), eBPF runtime security (Falco, Tetragon,
2026-05-16 · 23 min read #english#container-security#kubernetes-security#trivy#grypeStatic Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive ♪ Listenable
Mapping the 2026 code security tooling landscape — Semgrep (the de facto OSS SAST plus Pro engine and Supply Chain), CodeQL (the heart of GitHub Advanced Security, dataflow king), Snyk Code (SAST+SCA after the DeepCode A
2026-05-15 · 26 min read #security#sast#static-analysis#semgrep#codeqlContainer & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime) ♪ Listenable
There are too many container security tools now. Scanners (Trivy, Grype, Snyk), AppSec plus Cloud integrations (Aikido), CNAPP leaders (Wiz, Orca), runtime detection (Sysdig Falco, Tetragon), artifact-side (JFrog Xray),
2026-05-14 · 22 min read #container-security#trivy#snyk#aikido#wizContainer Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security
Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,
2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbomContainer Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore
A comprehensive guide to the full container image security lifecycle. From vulnerability scanning with Trivy, image signing with Cosign/Sigstore, SBOM generation and management, to the SLSA framework -- implement product
2026-03-13 · 15 min read #devops#container-security#trivy#cosign#sbom