Trivy

소개

The Trivy plugin starts an experimental MCP Server, providing a gateway for IDEs like VSCode to interact with Trivy. This enables vulnerability and misconfiguration scanning of filesystems, images, and repositories directly within the development environment. Currently under active development, it offers both stdio and SSE HTTP transport options for integration.

주요 기능

• Provides command-line options for configuration.
• Starts an MCP Server for Trivy.
• Supports stdio and SSE HTTP transport.
• Integrates with VSCode for vulnerability scanning.
• 10 GitHub stars
• Enables filesystem, image, and repository scanning.

사용 사례

• Scanning local projects for vulnerabilities directly within VSCode.
• Identifying vulnerabilities in remote repositories.
• Analyzing container images for security issues.