docker/sbx-kit-trivy-mixin:latest

schemaVersion: "3"
displayName: Trivy (mixin)
description: Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binary in an overlay, with the egress its vulnerability-database pull needs. Layer it onto a shell base and run `trivy`.
sourceUrl: https://github.com/aquasecurity/trivy
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - mirror.gcr.io
                - ghcr.io
                - pkg-containers.githubusercontent.com
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/trivy-mixin/trivy-mixin-context.md