Trivy Python Packages

ca9

CA9 is a local evidence engine for Python AppSec triage. It sits after scanners and before engineers waste time, proving which findings matter.

docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

trivy-py-ecc

pre-commit hook that mirrors the trivy for usage as pre-commit language

devsecops-radar

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

base-image-inspector

🐳 Find and digest-pin official container base images in seconds - Python, .NET, Java, Go, Node.js, Rust, Ubuntu, and more.

sbom-pipeline

SBOM Generator & Formatter — full Python pipeline (no shell)

securescan

Diff-aware security scanning with multi-tool orchestration, deterministic SARIF, and PR-comment rendering.

ecranner

Scan the vulnerability of Docker images stored in ECR

trivy-streamlit

A streamlit-based app for trivy scanner results 🔒