{"avoid_when":"只要代码 SAST 不涉及供应链制品","content_hash":"ad2f01e901db18175aa23368a364f3ac339af650f623169391d1a4cdbf5e5b8f","domain":"security","evidence_urls":["https://github.com/aquasecurity/trivy"],"id":"trivy","language":"Go","license":"","name":"Trivy","niche":"vuln scanner","repo":"https://github.com/aquasecurity/trivy","source_updated_at":null,"status":"active","summary":"容器/文件系统/仓库漏洞与误配扫描。","tags":["containers","scanning"],"use_when":"CI 里扫镜像与依赖漏洞","verification_status":"unverified","verified_at":null}