Trivy Python Packages

ca9

CA9 is a local evidence engine for Python AppSec triage. It sits after scanners and before engineers waste time, proving which findings matter.

docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

trivy-py-ecc

pre-commit hook that mirrors the trivy for usage as pre-commit language

devsecops-radar

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

audit-packs

An evidence-first Compliance Intelligence Engine that transforms security scanner findings into standardized, evidence-backed compliance artifacts.

gateshield

Policy-driven security orchestration for hardened CI/CD pipelines

base-image-inspector

🐳 Find and digest-pin official container base images in seconds - Python, .NET, Java, Go, Node.js, Rust, Ubuntu, and more.

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

remedify

Turn vulnerability scan results (Trivy/Grype/Sysdig) into deterministic, OS-specific remediation plans — commands, backport explanations, Ansible playbooks, MCP server

sbom-pipeline

Инструмент для безопасной генерации, анализа и форматирования Software Bill of Materials (SBOM).

ecranner

Scan the vulnerability of Docker images stored in ECR

trivy-streamlit

A streamlit-based app for trivy scanner results 🔒