Awesome

Trivy Vulnerability Scanner Plugin

Trivy Vulnerability Scanner is a VS Code plugin that helps you find vulnerabilities in your software projects without leaving the comfort of your VS Code window.

Demo

Trivy Scan in Action

Findings Explorer

The Trivy VS Code plugin now has a findings explorer which allows you to more easily navigate the config and vulnerability findings in your project Trivy Findings Explorer

Requirements

Trivy version v0.9.1 and above.

Known Issues

If you find one, please file a GitHub Issue here.

Feature Requests

Have a feature you desire? Please let us know by filing an issue here.

Release Notes

0.6.1

Handle findings inside tarballs

0.6.0

Add support for secrets - turn on in the extension settings

0.5.1

Fix json check

0.5.0

Add support for newer format of json results

0.4.1

Fix typo in the configuration settings

0.4.0

Add additional settings for offline and minimum severity

0.3.0

Add Findings viewer and help

0.2.0

Automatic detection of old Trivy versions.

0.1.1

Initial release with basic project scanning.