Scans container images, IaC templates, and SBOM artifacts using Aqua Trivy CLI. Generates CycloneDX and SPDX reports with CVE severity filtering for CI/CD gates.
Installs into .claude/skills of the current project.
Are you the author of Trivy Vulnerability Scanner Pipeline?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-trivy-vulnerability-scanner-pipeline)
---
name: "Trivy Vulnerability Scanner Pipeline"
slug: "trivy-vulnerability-scanner-pipeline"
description: "Scans container images, IaC templates, and SBOM artifacts using Aqua Trivy CLI. Generates CycloneDX and SPDX reports with CVE severity filtering for CI/CD gates."
github_stars: 34488
verification: "security_reviewed"
source: "https://github.com/aquasecurity/trivy"
category: "Security & Verification"
framework: "Claude Code"
tool_ecosystem:
github_repo: "aquasecurity/trivy"
github_stars: 34488
---
# Trivy Vulnerability Scanner Pipeline
Scans container images, IaC templates, and SBOM artifacts using Aqua Trivy CLI. Generates CycloneDX and SPDX reports with CVE severity filtering for CI/CD gates.
## Installation
Requirements and caveats from upstream:
- ![Docker Pulls][docker-pulls]
- docker run aquasec/trivy
- There are canary builds ([Docker Hub](https://hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary), [GitHub](https://github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary), [ECR](https://gallery.ec...
Basic usage or getting-started notes:
- ### Get Trivy
- Trivy is available in most common distribution channels. The full list of installation options is available in the [Installation] page. Here are a few popular examples:
- brew install trivy
- Source: https://github.com/aquasecurity/trivy
- Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/trivy/HEAD/README.md
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/trivy-vulnerability-scanner-pipeline/)
