Skill UI

Perform comprehensive dependency vulnerability scans across ecosystems, generate SBOMs for compliance, assess supply chain risks, and suggest remediation plans while enforcing secure best practices.

Deploy Aqua Security’s Trivy scanner to inspect container images, file systems, repos, and Kubernetes workloads for vulnerabilities, misconfigurations, secrets, and SBOM/license issues while integrating with CI/CD pipelines.

Use Aqua Security Trivy to scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, secrets, and licensing issues while generating CycloneDX/SPDX SBOMs and CI/CD reports.

Guide for using Anchore Grype to scan container images, SBOMs, and filesystems for known vulnerabilities, with configurable outputs, severity thresholds, and CI/CD integration for automated gating.

Trivy scans Docker images for OS, language, configuration, secret, and license vulnerabilities, emits SARIF/CycloneDX/SPDX/JSON reports, and enforces policies via .trivyignore while integrating into GitHub Actions or GitLab CI pipelines to keep containers secure.

Implements vulnerability scanning, SBOM generation, and signing workflows for container registry images using Trivy, Grype, Syft, Cosign and Sigstore, then gates CI/CD deployments and registry controls to block unverified artifacts.