2022-09-15 19:27:58 +01:00
|
|
|
|
# Additional Resources and Tutorials
|
|
|
|
|
|
Below is a list of additional resources from Aqua Security.
|
|
|
|
|
|
|
|
|
|
|
|
## Announcements
|
|
|
|
|
|
|
|
|
|
|
|
- [Trivy Vulnerability Scanner Joins the Aqua Open-source Family](https://blog.aquasec.com/trivy-vulnerability-scanner-joins-aqua-family)
|
|
|
|
|
|
- [Trivy Image Vulnerability Scanner Now Under Apache 2.0 License](https://blog.aquasec.com/trivy-open-source-vulnerability-scanner-apache2.0-license)
|
|
|
|
|
|
|
2022-11-30 16:56:45 +07:00
|
|
|
|
## Vulnerability Scanning
|
2022-09-15 19:27:58 +01:00
|
|
|
|
|
|
|
|
|
|
- [Using Trivy to Discover Vulnerabilities in VS Code Projects](https://blog.aquasec.com/trivy-open-source-vulnerability-scanner-vs-code)
|
|
|
|
|
|
- [How does a vulnerability scanner identify packages?](https://youtu.be/PaMnzeHBa8M)
|
|
|
|
|
|
- [Handling Container Vulnerabilities with Open Policy Agent - Teppei Fukuda, Aqua Security](https://youtu.be/WKE2XNZ2zr4)
|
|
|
|
|
|
|
|
|
|
|
|
## CI/CD Pipelines
|
|
|
|
|
|
|
|
|
|
|
|
- [DevSecOps with Trivy and GitHub Actions](https://blog.aquasec.com/devsecops-with-trivy-github-actions)
|
|
|
|
|
|
- [Find Image Vulnerabilities Using GitHub and Aqua Security Trivy Action](https://blog.aquasec.com/github-vulnerability-scanner-trivy)
|
|
|
|
|
|
|
|
|
|
|
|
## Misconfiguration Scanning
|
|
|
|
|
|
|
|
|
|
|
|
- [Identifying Misconfigurations in your Terraform](https://youtu.be/cps1V5fOHtE)
|
|
|
|
|
|
|
|
|
|
|
|
## Client/Server
|
|
|
|
|
|
|
|
|
|
|
|
- [Using Trivy in client server mode](https://youtu.be/tNQ-VlahtYM)
|
|
|
|
|
|
|
|
|
|
|
|
## Workshops
|
|
|
|
|
|
|
|
|
|
|
|
- [Trivy Live Demo & Q&A](https://youtu.be/6Vw0QgJ-k5o)
|
|
|
|
|
|
- [First Steps to Full Lifecycle Security with Open Source Tools - Rory McCune & Anais Urlichs](https://youtu.be/nwJ0366rs6s)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## Older Resources
|
|
|
|
|
|
|
|
|
|
|
|
- [Webinar: Trivy Open Source Scanner for Container Images – Just Download and Run!](https://youtu.be/XnYxX9uueoQ)
|
|
|
|
|
|
- [Kubernetes Security through GitOps Best Practices: ArgoCD and Starboard](https://youtu.be/YvMY8to9aHI)
|
|
|
|
|
|
- [Get started with Kubernetes Security and Starboard](https://youtu.be/QgctrpTpJec)
|