Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets.
Cost / License
- Free
- Open Source (Apache-2.0)
Application type
Platforms
- Mac
- Linux
- Docker
Israel



The only alternative to sbomify action so far is Trivy, which is free and open source. It runs on Mac and Linux.
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets.


