sha256:ccd2761f03d91a9ea2998fa2ff4434f23957603de90c276b54a2e6472e33e55b
Last pushed
about 8 hours by sbx
Type
Sandbox Kit
Manifest digest
sha256:ccd2761f03d91a9ea2998fa2ff4434f23957603de90c276b54a2e6472e33e55b
schemaVersion: "3"
displayName: Trivy (mixin)
description: Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binary in an overlay, with the egress its vulnerability-database pull needs. Layer it onto a shell base and run `trivy`.
sourceUrl: https://github.com/aquasecurity/trivy
kind: mixin
provides:
- [email protected]
capabilities:
- type: com.docker.sandbox/network-policy@1
config:
runtime:
allow:
- mirror.gcr.io
- ghcr.io
- pkg-containers.githubusercontent.com
- type: com.docker.sandbox/agent-context@1
config:
contentFile: /usr/share/sandbox/kit/trivy-mixin/trivy-mixin-context.md