Launches an MCP server to act as a gateway to Trivy vulnerability scanning.
The Trivy plugin starts an experimental MCP Server, providing a gateway for IDEs like VSCode to interact with Trivy. This enables vulnerability and misconfiguration scanning of filesystems, images, and repositories directly within the development environment. Currently under active development, it offers both stdio and SSE HTTP transport options for integration.
主要功能
01Provides command-line options for configuration.
02Starts an MCP Server for Trivy.
03Supports stdio and SSE HTTP transport.
04Integrates with VSCode for vulnerability scanning.
0510 GitHub stars
06Enables filesystem, image, and repository scanning.
使用案例
01Scanning local projects for vulnerabilities directly within VSCode.
02Identifying vulnerabilities in remote repositories.
