trivy-github

Running Trivy on GitHub: A Practical Security Guide

Wiring Trivy into GitHub Actions gives you free container, filesystem, and IaC scanning with results in the Security tab. Here's a working setup and the pinning mistake to avoid.