mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-03-31 08:19:54 +02:00
69 lines
1.6 KiB
YAML
69 lines
1.6 KiB
YAML
name: "trivy"
|
||
command: "trivy"
|
||
enabled: true
|
||
|
||
short_description: "容器和文件系统漏洞扫描器"
|
||
|
||
description: |
|
||
Trivy是一个简单而全面的容器和文件系统漏洞扫描器。
|
||
|
||
**主要功能：**
|
||
- 容器镜像扫描
|
||
- 文件系统扫描
|
||
- 代码仓库扫描
|
||
- 配置文件扫描
|
||
|
||
**使用场景：**
|
||
- 容器安全扫描
|
||
- CI/CD集成
|
||
- 漏洞检测
|
||
- 安全审计
|
||
|
||
parameters:
|
||
- name: "scan_type"
|
||
type: "string"
|
||
description: "扫描类型（image, fs, repo, config）"
|
||
required: false
|
||
default: "image"
|
||
|
||
- name: "target"
|
||
type: "string"
|
||
description: "扫描目标（镜像名、目录、仓库）"
|
||
required: true
|
||
position: 0
|
||
format: "positional"
|
||
|
||
- name: "severity"
|
||
type: "string"
|
||
description: "严重程度过滤（UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL）"
|
||
required: false
|
||
flag: "--severity"
|
||
format: "flag"
|
||
|
||
- name: "output_format"
|
||
type: "string"
|
||
description: "输出格式（json, table, sarif）"
|
||
required: false
|
||
flag: "--format"
|
||
format: "flag"
|
||
default: "json"
|
||
|
||
- name: "additional_args"
|
||
type: "string"
|
||
description: |
|
||
额外的Trivy参数。用于传递未在参数列表中定义的Trivy选项。
|
||
|
||
**示例值：**
|
||
- "--exit-code 1": 发现漏洞时退出码为1
|
||
- "--skip-dirs": 跳过目录
|
||
- "--skip-files": 跳过文件
|
||
- "--no-progress": 不显示进度条
|
||
|
||
**注意事项：**
|
||
- 多个参数用空格分隔
|
||
- 确保参数格式正确，避免命令注入
|
||
- 此参数会直接追加到命令末尾
|
||
required: false
|
||
format: "positional"
|
||
|