KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #dsh #dsh-plugin #ai-agent #codex #ai-agents #deepseek-harness #claude-code #cli #react #mcp

pre-commit-trivy

★ 37 Open GitHub ↗

No description available.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# pre-commit-trivy

Add this to your [pre-commit](https://pre-commit.com/) `.pre-commit-config.yaml` config.

You can use [trivy fs flags](https://trivy.dev/docs/v0.72/guide/target/filesystem/) to configure Trivy filesytem scans.
Insert the required flags in the `args` field.

You can also use the `trivyconfig-docker` to scan for misconfigurations [trivy config](https://trivy.dev/docs/v0.70/guide/scanner/misconfiguration/)

## trivyfs-docker

pre-commit will use the `aquasec/trivy:0.72.0` docker image and run it inside a docker container.

```yaml
repos:
  - repo: https://github.com/mxab/pre-commit-trivy.git
    rev: v0.72.0
    hooks:
      - id: trivyfs-docker
        args:
          - --skip-dirs
          - ./tests
          - . # last arg indicates the path/file to scan
      - id: trivyconfig-docker
        args:
          - --skip-dirs
          - ./tests
          - . # last arg indicates the path/file to scan
```

### Cache

The hook will create a cache directory `.pre-commit-trivy-cache` in your repo. Add it to the `.gitignore`.

```
echo ".pre-commit-trivy-cache" >> .gitignore
```

## Example

You can find a sample use case here https://github.com/mxab/trivy-pre-commit-demo

pre-commit-trivy

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README