sha256:f3ea396656bd4ba08dddd5bdb9780be77e266832628b91572fa1459fdcdb20c8
Last pushed
about 13 hours by sbx
Type
Sandbox Kit
Manifest digest
sha256:f3ea396656bd4ba08dddd5bdb9780be77e266832628b91572fa1459fdcdb20c8
schemaVersion: "3"
displayName: Trivy (mixin)
description: Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binary in an overlay, with the egress its vulnerability-database pull needs. Layer it onto a shell base and run `trivy`.
sourceUrl: https://github.com/aquasecurity/trivy
kind: mixin
provides:
- [email protected]
capabilities:
- type: com.docker.sandbox/network-policy@1
config:
runtime:
allow:
- mirror.gcr.io
- ghcr.io
- pkg-containers.githubusercontent.com
- type: com.docker.sandbox/agent-context@1
config:
contentFile: /usr/share/sandbox/kit/trivy-mixin/trivy-mixin-context.md