Blogs

DevSecOps with Trivy and GitHub Actions

Aquasec

Configuration of a DevSecOps workflow, that leverages GitHub Actions to build a Docker container, and Trivy to scan for vulnerabilities, on each code push.

Visit Site

DevSecOps with Trivy and GitHub Actions
Trivy: The Universal Scanner to Secure Your Cloud MigrationAquasec Kubernetes Benchmark Scans with Trivy: CIS and NSA ReportsAquasec Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s EnvironmentsAquasec Malware Forensic Analysis: Capturing What Attackers Leave BehindAquasec Cloud Workload Security: Aqua Shines in GigaOm's Radar ReportAquasec Deceptive Deprecation: The Truth About npm Deprecated PackagesAquasec Looping by Zapier: Repeat actions for itemsZapier DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Integrate Jupyter Notebooks with GitHubThenewstack Pulumi Neo Now Supports AGENTS.mdPulumi How AI Assistants Can Decode GitHub Repos for UI WritersDocker Build Your Own PluginVercel GitHub - MintlifyMintlify Introducing Dependency Divergence GitHub ActionSocket State of DevSecOpsDatadoghq Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-HuludSocket Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket How to Use OpenPubkey with GitHub Actions WorkloadsDocker