SCA va image skanlash: Trivy

Bu dars Premium obuna talab qiladi

SCA va SAST farqi; CVE, GHSA, CVSS va darajalar, Fixed Version va unfixed; Trivy zaifliklar bazasi va oflayn rejim; trivy fs (requirements.txt), trivy image --input (docker save tar), trivy config (Dockerfile/K8s); --severity, --ignore-unfixed, --exit-code bilan CI gate; .trivyignore'da sabab va exp: muddat; JSON/SARIF hisobot va jq.

Ushbu dars DevOps muhandisi yo'li kursiga tegishli.