https://github.com/aquasecurity/trivy-azure-pipelines-task

Azure Pipelines Task for trivy
https://github.com/aquasecurity/trivy-azure-pipelines-task

azure-devops azure-pipelines-task extension hacktoberfest trivy

Last synced: 8 months ago
JSON representation

Azure Pipelines Task for trivy

• Host: GitHub
• URL: https://github.com/aquasecurity/trivy-azure-pipelines-task
• Owner: aquasecurity
• License: mit
• Created: 2022-05-17T13:44:34.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2025-07-09T08:50:58.000Z (12 months ago)
• Last Synced: 2025-10-02T15:47:46.872Z (9 months ago)
• Topics: azure-devops, azure-pipelines-task, extension, hacktoberfest, trivy
• Language: TypeScript
• Homepage: https://marketplace.visualstudio.com/items?itemName=AquaSecurityOfficial.trivy-official
• Size: 2.15 MB
• Stars: 64
• Watchers: 10
• Forks: 37
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Aqua Trivy Azure DevOps Extension

An Azure DevOps Pipelines Task for [Trivy](https://github.com/aquasecurity/trivy), providing vulnerability scanning with an integrated UI.

![Screenshot showing the Trivy extension in the Azure DevOps UI](images/resultsview.png)

## Overview

This extension allows you to scan various targets for:

- Vulnerabilities in applications and dependencies

- Misconfigurations in Infrastructure as Code (IaC) files

- Secrets accidentally committed to repositories

- License compliance issues

## Quick Start

1. Install the Trivy task from the [Azure DevOps Marketplace](https://marketplace.visualstudio.com/items?itemName=AquaSecurityOfficial.trivy-official) and press the `Get it free` button.

![Marketplace](docs/imgs/marketplace.png)

2. Add the task to your `azure-pipelines.yml`:

```yaml

steps:

  - task: trivy@2

    inputs:

      type: 'filesystem'

      target: '.'

      scanners: 'vuln,misconfig,secret'

```

> [!Important]

> Docker integration is only fully supported on Linux agents. Windows agents have limited Docker support.

## Documentation

Check out the [documentation](docs/README.md) for more details:

- [Installation Guide](docs/installation.md)

- [Trivy@1 Configuration](docs/trivyv1.md) (Legacy version)

- [Trivy@2 Configuration](docs/trivyv2.md) (Recommended for new users)

- [Aqua Platform Integration](docs/connectedservice.md)