<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>Trivy on Hex Blog</title><link>https://hex-go.github.io/tags/trivy/</link><description>Recent content in Trivy on Hex Blog</description><generator>Hugo -- gohugo.io</generator><language>zh</language><managingEditor>hex-py@gmail.com (Hex)</managingEditor><webMaster>hex-py@gmail.com (Hex)</webMaster><copyright>©2026, All Rights Reserved</copyright><lastBuildDate>Fri, 06 Nov 2020 06:26:40 +0000</lastBuildDate><atom:link href="https://hex-go.github.io/tags/trivy/index.xml" rel="self" type="application/rss+xml"/><item><title>DevOps-trivy-镜像扫描汇总</title><link>https://hex-go.github.io/posts/devops/2020-11-06-devops-trivy-%E9%95%9C%E5%83%8F%E6%89%AB%E6%8F%8F%E6%B1%87%E6%80%BB/</link><pubDate>Fri, 06 Nov 2020 06:26:40 +0000</pubDate><author>hex-py@gmail.com (Hex)</author><atom:modified>Fri, 06 Nov 2020 06:26:40 +0000</atom:modified><guid>https://hex-go.github.io/posts/devops/2020-11-06-devops-trivy-%E9%95%9C%E5%83%8F%E6%89%AB%E6%8F%8F%E6%B1%87%E6%80%BB/</guid><description>重要 trivy 用于扫描容器镜像的安全漏洞。 生产环境建议将漏洞库离线部署——将漏洞库打包进 Server 端镜像，内网独立运行。安全人员根据扫描结果升级基础镜像或 buildpack</description><dc:creator>Hex</dc:creator><category>Devops</category><category>安全</category><category>镜像扫描</category><category>Trivy</category><category>Devops</category></item></channel></rss>