trivy
One command to find vulnerabilities, misconfigs, and secrets in containers, K8s, code, and clouds.
Trivy is a comprehensive open-source security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOMs across containers, Kubernetes, code repos, clouds, and VMs.