Adopt
Trivy is our primary scanner for detecting CVEs in container images, file systems, and Git repositories. We embed Trivy in our CI pipelines to fail builds containing critical vulnerabilities. In Kubernetes, the Trivy Operator provides continuous runtime scanning, generating VulnerabilityReport CRDs that give us a live dashboard of the security posture of running workloads.