Watch / Rawkode Live 1:08:25
Live · Tutorial · Rawkode Live

Hands-on Introduction to Trivy

§ Overview

About this video

What You'll Learn

  1. Scan container images for missing patches and unfixed vulnerabilities before pushing.
  2. Use Trivy on Terraform and Kubernetes manifests to catch misconfigurations early.
  3. Integrate scans into GitHub Actions and sign container builds with cosign.

Rory McCune joins to demo Trivy, Aqua Security's scanner for container images, filesystems, Git repos, Kubernetes manifests, and Terraform. Hands-on installation, image scanning, IaC checks, plus a GitHub Actions pipeline that signs builds with cosign.

§ Technologies featured

Meet the Cast

Weekly Cloud Native insights

Stay ahead in cloud native

Tutorials, deep dives, and curated events. No fluff.

More from Rawkode Live

View all 173 episodes

More about Docker

View all 36 videos
Kubernetes

More about Kubernetes

View all 172 videos
Terraform

More about Terraform

View all 12 videos

More about sigstore

View technology