[
  {
    "id": "trivy-docs-1",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/container_image/",
    "excerpt": "It detects known vulnerabilities in your container image.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-2",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/filesystem/",
    "excerpt": "Trivy will look for vulnerabilities based on lock files such as Gemfile.lock and package-lock.json.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-3",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/scanner/secret/",
    "excerpt": "Trivy scans any container image, filesystem and git repository to detect exposed secrets like passwords, api keys, and tokens. Secret scanning is enabled by default.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-4",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/scanner/misconfiguration/",
    "excerpt": "Trivy provides built-in checks to detect configuration issues in popular Infrastructure as Code files, such as: Docker, Kubernetes, Terraform, CloudFormation, and more.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-5",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/scanner/license/",
    "excerpt": "Trivy scans any container image for license files and offers an opinionated view on the risk associated with the license.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-6",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/supply-chain/sbom/",
    "excerpt": "Trivy can generate the following SBOM formats.\n\n*   [CycloneDX](#cyclonedx)\n*   [SPDX](#spdx)",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-7",
    "tier": "claimed-docs",
    "url": "https://github.com/aquasecurity/trivy-mcp",
    "excerpt": "Natural Language Scanning: Ask questions about security issues in natural language",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-gh-1",
    "tier": "github",
    "url": "https://github.com/aquasecurity/trivy",
    "excerpt": "trivy k8s --report summary cluster",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-gh-2",
    "tier": "github",
    "url": "https://github.com/aquasecurity/trivy",
    "excerpt": "Trivy is available in most common distribution channels. ... `brew install trivy` ... `docker run aquasec/trivy`",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-8",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/container_image/",
    "excerpt": "Trivy detects misconfigurations on the configuration of container images. The image config is converted into Dockerfile and Trivy handles it as Dockerfile.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-9",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/filesystem/",
    "excerpt": "it stores analysis results, using the latest commit hash as the key.",
    "fetchedAt": "2026-09-03T23:48:42.647Z"
  },
  {
    "id": "trivy-docs-10",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/scanner/secret/",
    "excerpt": "Trivy scans any container image, filesystem and git repository to detect exposed secrets like passwords, api keys, and tokens.",
    "fetchedAt": "2026-09-03T23:50:14.095Z"
  },
  {
    "id": "trivy-docs-11",
    "tier": "claimed-docs",
    "url": "https://github.com/aquasecurity/trivy-mcp",
    "excerpt": "**Natural Language Scanning**: Ask questions about security issues in natural language",
    "fetchedAt": "2026-09-03T23:50:14.095Z"
  },
  {
    "id": "trivy-gh-3",
    "tier": "github",
    "url": "https://github.com/aquasecurity/trivy",
    "excerpt": "You can find a high level comparison table specific to Trivy users [here]",
    "fetchedAt": "2026-09-03T23:50:14.095Z"
  },
  {
    "id": "trivy-docs-12",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/supply-chain/sbom/",
    "excerpt": "Trivy can generate the following SBOM formats.",
    "fetchedAt": "2026-09-03T23:51:47.151Z"
  },
  {
    "id": "trivy-docs-13",
    "tier": "claimed-docs",
    "url": "https://github.com/aquasecurity/trivy-mcp",
    "excerpt": "This plugin starts a Model Context Protocol (MCP) server that integrates Trivy's security scanning capabilities with VS Code and other MCP-enabled tools.",
    "fetchedAt": "2026-09-03T23:51:47.151Z"
  },
  {
    "id": "trivy-docs-14",
    "tier": "claimed-docs",
    "url": "https://trivy.dev",
    "excerpt": "After evaluating several leading options for open source vulnerability scanning, Trivy really stood out",
    "fetchedAt": "2026-09-03T23:51:47.151Z"
  },
  {
    "id": "trivy-docs-15",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/filesystem/",
    "excerpt": "Trivy can generate SBOM for local projects.",
    "fetchedAt": "2026-09-03T23:52:12.183Z"
  },
  {
    "id": "trivy-docs-16",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/guide/",
    "excerpt": "The image config is converted into Dockerfile and Trivy handles it as Dockerfile.",
    "fetchedAt": "2026-09-03T23:52:12.183Z"
  },
  {
    "id": "trivy-docs-17",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/container_image/",
    "excerpt": "It detects known vulnerabilities in your container image... `$ trivy image [YOUR_IMAGE_NAME]`",
    "fetchedAt": "2026-09-16T21:11:04.893Z"
  },
  {
    "id": "trivy-docs-18",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/supply-chain/sbom/",
    "excerpt": "Trivy can generate the following SBOM formats. * CycloneDX * SPDX",
    "fetchedAt": "2026-09-16T21:11:04.893Z"
  },
  {
    "id": "trivy-docs-19",
    "tier": "claimed-docs",
    "url": "https://trivy.dev/docs/latest/target/container_image/",
    "excerpt": "Trivy scans the configuration of container images for * Misconfigurations * Secrets... You can enable them with `--image-config-scanners`.",
    "fetchedAt": "2026-09-16T21:11:04.893Z"
  },
  {
    "id": "trivy-gh-4",
    "tier": "github",
    "url": "https://github.com/aquasecurity/trivy",
    "excerpt": "You can find a high level comparison table specific to Trivy users [here](https://trivy.dev/docs/latest/commercial/compare/).",
    "fetchedAt": "2026-09-16T21:11:04.893Z"
  },
  {
    "id": "trivy-comm-1",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47475888",
    "excerpt": "On March 22, 2026, a threat actor used compromised credentials to publish malicious Trivy v0.69.5 and v0.69.6 DockerHub images, days after a prior March 19 compromise.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-2",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47475888",
    "excerpt": "second breach in a month from the same initial credential compromise. the first rotation didn't fully revoke access. the attacker walked right back in.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-3",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47475888",
    "excerpt": "Trivy claims: 'We rotated secrets and tokens, but the process wasn't atomic and attackers may have been privy to refreshed tokens.'",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-4",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47475888",
    "excerpt": "Hey look, infrastructure underpinning the security of thousands of products, being compromised in a way a simple setting could have prevented (force-updating tags).",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-5",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47450142",
    "excerpt": "This attack seems predicated on a prior security incident at Trivy where they failed to successfully remediate and contain the damage... a second compromise occurred.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-6",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47450142",
    "excerpt": "credential rotation was performed but was not atomic (not all credentials were revoked simultaneously).",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-7",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47450142",
    "excerpt": "Pretty ironic that the security tool is insecure.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-8",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47471805",
    "excerpt": "Trivy (a very widely-used security scanner) was recently compromised. Anyone who installed the aquasecurity/trivy-action dependency by tag rather than by sha during a 3 hour period on March 19 was likely compromised.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-9",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=38460947",
    "excerpt": "I would kill for an all-in-one solution where I work... today we use a different scanner for every single type of scan we perform, and it's a nightmare to programmatically analyze results.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-10",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=38460947",
    "excerpt": "Got a really bad taste when Aqua just dropped support for tfsec entirely, including closing all GitHub issues even unfixed, instead pointing to trivy.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-11",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/29181577",
    "excerpt": "I've had a great experience with Trivy, very solid tool, very easy to write automation around.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-12",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/29181577",
    "excerpt": "we use AquaSec and it's absolutely the same engine. Trivy is so good we were tempted to drop AquaSec entirely as we only use it in our CI and this covers our requirements.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-13",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/29181577",
    "excerpt": "Trivy is good. It comes bundled with the harbor docker registry, meaning you get security analysis of your images and provide for some level of security.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-14",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/29181577",
    "excerpt": "it's super easy to integrate in every ci/cd pipeline",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-comm-15",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=32481270",
    "excerpt": "Just tried it: ./trivy aws --region us-east-1 -> panic: runtime error: invalid memory address or nil pointer dereference. Posted a Github issue as well.",
    "fetchedAt": "2026-09-03T23:56:24.537Z"
  },
  {
    "id": "trivy-probe-1",
    "tier": "probe",
    "url": "https://trivy.dev/llms.txt",
    "excerpt": "PROBE llms.txt: HTTP 404 at https://trivy.dev/llms.txt",
    "fetchedAt": "2026-09-16T21:11:06.601Z"
  },
  {
    "id": "trivy-probe-2",
    "tier": "probe",
    "url": "https://trivy.dev/docs/latest/guide/.md",
    "excerpt": "PROBE docs-md: HTTP 404 at https://trivy.dev/docs/latest/guide/.md",
    "fetchedAt": "2026-09-16T21:11:06.601Z"
  },
  {
    "id": "trivy-probe-3",
    "tier": "probe",
    "url": "https://trivy.dev/openapi.json",
    "excerpt": "PROBE openapi: all candidate paths 404 (https://trivy.dev/openapi.json, https://trivy.dev/swagger.json, https://trivy.dev/api/openapi.json, https://trivy.dev/.well-known/openapi.json)",
    "fetchedAt": "2026-09-16T21:11:06.601Z"
  },
  {
    "id": "trivy-probe-4",
    "tier": "probe",
    "url": "https://github.com/aquasecurity/trivy-mcp",
    "excerpt": "official MCP server documented at https://github.com/aquasecurity/trivy-mcp",
    "fetchedAt": "2026-09-16T21:11:06.601Z"
  },
  {
    "id": "trivy-probe-5",
    "tier": "probe",
    "url": "https://github.com/aquasecurity/trivy",
    "excerpt": "official CLI documented at https://github.com/aquasecurity/trivy",
    "fetchedAt": "2026-09-16T21:11:06.601Z"
  }
]