Trivy is an open-source security scanner used to find security vulnerabilities, misconfigurations, secrets, and software dependencies in containers, source code, Kubernetes, and cloud infrastructure.
With Trivy, you can scan Docker images, Git repositories, Kubernetes clusters, and Infrastructure as Code (Terraform) before deployment. It integrates with CI/CD tools like Jenkins, GitHub Actions, and GitLab CI.
In simple words, Trivy checks your applications and infrastructure for security issues, helping you fix vulnerabilities before they reach production.