Trivy

Trivy offers container and infrastructure security scanning for teams checking container images before release.

Visit Trivy official site

What it does

It scans container images and configurations for weaknesses.

When to use it

When checking container images before release, compare findings with packages in the deployed image.

Gitleaks

Gitleaks offers secret scanning for Git history and files for teams finding accidentally committed credentials before push.

  • security
  • scanning

Research

Semgrep

Semgrep offers code rule scanning and security analysis for teams finding risky patterns before code review.

  • security
  • scanning

Web Utility

Snyk

Snyk offers dependency and code security scanning for teams checking known risks in dependencies.

  • security
  • scanning

Web Utility