https://txtmix.com/tags/%E5%AE%B9%E5%99%A8%E5%AE%89%E5%85%A8/Recent content in 容器安全 on Text MatrixHugozh-cnTue, 21 Jul 2026 20:06:14 +0800https://txtmix.com/posts/tech/trivy-aquasecurity-security-scanner-guide/Thu, 04 Jun 2026 15:00:00 +0800https://txtmix.com/posts/tech/trivy-aquasecurity-security-scanner-guide/<h1 id="trivy-实战指南aqua-security-开源的全能安全扫描器">Trivy 实战指南：Aqua Security 开源的「全能」安全扫描器</h1> <h2 id="核心判断">核心判断</h2> <p><code>Trivy</code>（仓库 <a href="https://github.com/aquasecurity/trivy" target="_blank" rel="noopener noreffer ">aquasecurity/trivy</a>）不是&quot;又一款&quot;漏洞扫描器，而是把 <strong>CVE 漏洞、SBOM 软件物料清单、IaC 错误配置、敏感密钥、License 风险</strong> 五类扫描压进同一把 CLI 刀的工具。它能在容器镜像、文件系统、Git 远程仓库、虚拟机镜像、Kubernetes 集群这 5 种目标上做同一种事——告诉你哪儿不安全、为什么、怎么修。</p>