MCPcopy Index your code
hub / github.com/aquasecurity/trivy-azure-pipelines-task

github.com/aquasecurity/trivy-azure-pipelines-task @v1.20.2

Chat with this repo
repository ↗ · DeepWiki ↗ · release v1.20.2 ↗ · + Follow
186 symbols 350 edges 33 files 1 documented · 1% ● updated 3mo agov1.20.2 · 2025-12-04★ 757 open issues
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

Aqua Trivy Azure DevOps Extension

An Azure DevOps Pipelines Task for Trivy, providing vulnerability scanning with an integrated UI.

Screenshot showing the Trivy extension in the Azure DevOps UI

Overview

This extension allows you to scan various targets for:

  • Vulnerabilities in applications and dependencies
  • Misconfigurations in Infrastructure as Code (IaC) files
  • Secrets accidentally committed to repositories
  • License compliance issues

Quick Start

  1. Install the Trivy task from the Azure DevOps Marketplace and press the Get it free button.

Marketplace

  1. Add the task to your azure-pipelines.yml:
steps:
  - task: trivy@2
    inputs:
      type: 'filesystem'
      target: '.'
      scanners: 'vuln,misconfig,secret'

[!Important] Docker integration is only fully supported on Linux agents. Windows agents have limited Docker support.

Documentation

Check out the documentation for more details:

Extension points exported contracts — how you extend this code

LicenseTableProps (Interface)
(no doc)
ui/src/LicenseTable.tsx
ListLicense (Interface)
(no doc)
ui/src/LicenseTable.tsx
VulnerabilitiesTableProps (Interface)
(no doc)
ui/src/VulnerabilitiesTable.tsx
ListVulnerability (Interface)
(no doc)
ui/src/VulnerabilitiesTable.tsx
AssuranceTableProps (Interface)
(no doc)
ui/src/AssuranceTable.tsx

Core symbols most depended-on inside this repo

compareSeverity
called by 6
ui/src/severity.tsx
renderSeverity
called by 5
ui/src/severity.tsx
countReportVulnerabilities
called by 4
ui/src/trivy.tsx
countReportMisconfigurations
called by 4
ui/src/trivy.tsx
countReportSecrets
called by 4
ui/src/trivy.tsx
countReportLicenses
called by 4
ui/src/trivy.tsx
getReport
called by 4
ui/src/ReportsPane.tsx
getReportTitle
called by 3
ui/src/trivy.tsx

Shape

Function 73
Interface 41
Method 39
Class 30
Enum 3

Languages

TypeScript100%

Modules by API surface

ui/src/trivy.tsx34 symbols
ui/src/SecretsTable.tsx10 symbols
ui/src/MisconfigurationsTable.tsx10 symbols
ui/src/App.tsx10 symbols
ui/src/ReportsPane.tsx9 symbols
ui/src/VulnerabilitiesTable.tsx8 symbols
ui/src/SuppressedTable.tsx8 symbols
ui/src/LicenseTable.tsx8 symbols
ui/src/AssuranceTable.tsx8 symbols
ui/src/Loading.tsx6 symbols
ui/src/BaseReport.tsx6 symbols
ui/src/ReportStats.tsx5 symbols

For agents

$ claude mcp add trivy-azure-pipelines-task \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact

Ask about this repo answers extend the page