name: "trivy"
command: "trivy"
enabled: true
short_description: "容器和文件系统漏洞扫描器"
description: |
  Trivy是一个简单而全面的容器和文件系统漏洞扫描器。

  **主要功能：**
  - 容器镜像扫描
  - 文件系统扫描
  - 代码仓库扫描
  - 配置文件扫描

  **使用场景：**
  - 容器安全扫描
  - CI/CD集成
  - 漏洞检测
  - 安全审计
parameters:
  - name: "scan_type"
    type: "string"
    description: "扫描类型（image, fs, repo, config）"
    required: false
    default: "image"
    position: 0
    format: "positional"
  - name: "target"
    type: "string"
    description: "扫描目标（镜像名、目录、仓库）"
    required: true
    position: 1
    format: "positional"
  - name: "severity"
    type: "string"
    description: "严重程度过滤（UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL）"
    required: false
    flag: "--severity"
    format: "flag"
  - name: "output_format"
    type: "string"
    description: "输出格式（json, table, sarif）"
    required: false
    flag: "--format"
    format: "flag"
    default: "json"
  - name: "additional_args"
    type: "string"
    description: |
      额外的Trivy参数。用于传递未在参数列表中定义的Trivy选项。

      **示例值：**
      - "--exit-code 1": 发现漏洞时退出码为1
      - "--skip-dirs": 跳过目录
      - "--skip-files": 跳过文件
      - "--no-progress": 不显示进度条

      **注意事项：**
      - 多个参数用空格分隔
      - 确保参数格式正确，避免命令注入
      - 此参数会直接追加到命令末尾
    required: false
    format: "positional"