Image

  1. NAME:
  2. trivy image - scan an image
  3. USAGE:
  4. trivy image [command options] image_name
  5. OPTIONS:
  6. --template value, -t value output template [$TRIVY_TEMPLATE]
  7. --format value, -f value format (table, json, template) (default: "table") [$TRIVY_FORMAT]
  8. --input value, -i value input file path instead of image name [$TRIVY_INPUT]
  9. --severity value, -s value severities of vulnerabilities to be displayed (comma separated) (default: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL") [$TRIVY_SEVERITY]
  10. --output value, -o value output file name [$TRIVY_OUTPUT]
  11. --exit-code value Exit code when vulnerabilities were found (default: 0) [$TRIVY_EXIT_CODE]
  12. --skip-update skip db update (default: false) [$TRIVY_SKIP_UPDATE]
  13. --download-db-only download/update vulnerability database but don't run a scan (default: false) [$TRIVY_DOWNLOAD_DB_ONLY]
  14. --reset remove all caches and database (default: false) [$TRIVY_RESET]
  15. --clear-cache, -c clear image caches without scanning (default: false) [$TRIVY_CLEAR_CACHE]
  16. --no-progress suppress progress bar (default: false) [$TRIVY_NO_PROGRESS]
  17. --ignore-unfixed display only fixed vulnerabilities (default: false) [$TRIVY_IGNORE_UNFIXED]
  18. --removed-pkgs detect vulnerabilities of removed packages (only for Alpine) (default: false) [$TRIVY_REMOVED_PKGS]
  19. --vuln-type value comma-separated list of vulnerability types (os,library) (default: "os,library") [$TRIVY_VULN_TYPE]
  20. --ignorefile value specify .trivyignore file (default: ".trivyignore") [$TRIVY_IGNOREFILE]
  21. --timeout value timeout (default: 2m0s) [$TRIVY_TIMEOUT]
  22. --light light mode: it's faster, but vulnerability descriptions and references are not displayed (default: false) [$TRIVY_LIGHT]
  23. --ignore-policy value specify the Rego file to evaluate each vulnerability [$TRIVY_IGNORE_POLICY]
  24. --list-all-pkgs enabling the option will output all packages regardless of vulnerability (default: false) [$TRIVY_LIST_ALL_PKGS]
  25. --skip-files value specify the file path to skip traversal [$TRIVY_SKIP_FILES]
  26. --skip-dirs value specify the directory where the traversal is skipped [$TRIVY_SKIP_DIRS]
  27. --cache-backend value cache backend (e.g. redis://localhost:6379) (default: "fs") [$TRIVY_CACHE_BACKEND]
  28. --help, -h show help (default: false)