This is the source code for the blog post -

How to build a CI/CD pipeline for container vulnerability scanning with Trivy and AWS Security Hub

The post goes through building a CI/CD Pipeline using CodePipeline, CodeBuild and CodeCommit as well as an open source vuln scanner (Trivy), to build and scan a Docker image. Many customers are adopting containers, or playing with the idea of using them but outside of expensive commercial products or GCP, there are not many scanners out there.

For more details check out the blog post:

here

License

This library is licensed under the MIT-0 License. See the LICENSE file.