1 repo
Collections of patterns and rules used to identify security vulnerabilities in static code or configuration files.
Distinguishing note: Focuses on the signature-based detection method rather than the tool itself.
Explore 1 awesome GitHub repository matching security & cryptography · Static Analysis Signatures. Refine with filters or upvote what's useful.
Trivy is a comprehensive security scanner designed to identify vulnerabilities and misconfigurations across container images, filesystems, and infrastructure as code files. It functions as a software composition analysis tool and an infrastructure security scanner, providing automated checks for CI/CD pipelines and cloud environments to ensure the integrity of the software supply chain. The tool distinguishes itself through a modular, plugin-based architecture that allows for the independent inspection of diverse targets. It utilizes a declarative policy engine to evaluate configurations agai
Identifies vulnerabilities by comparing artifacts against a versioned database of security signatures.