trivy-db

Overview

trivy-db is a CLI tool and a library to manipulate Trivy DB.

Library

Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc.

CLI

trivy-db builds vulnerability DBs on GitHub Actions and uploads them to GitHub Release periodically.

NAME:
   trivy-db - Trivy DB builder

USAGE:
   main [global options] command [command options] image_name

VERSION:
   0.0.1

COMMANDS:
     build    build a database file
     upload   upload database files to GitHub Release
     help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --help, -h     show help
   --version, -v  print the version

Building the DB

You can utilize make db-all to build the database, the DB artifact is outputted to the assets folder.

If you want to build the light DB, please set your environment to contain DB_TYPE=trivy-light.

Alternatively Docker is supported, you can run docker build . -t trivy-db.

If you want to build the light DB, please run docker build --build-arg DB_TYPE=trivy-light . -t trivy-db-light

If you want to build a trivy integration test DB, please run make create-test-db

Update interval

Every 6 hours