trivy

• aquasecurity/trivy
  • Apache-2.0, Golang
  • Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more