trivy

Vulnerability scanner

low risk

interactive breakdown — edit the command and press Explain
$ 
⚠ Risks & cautions
What it does

Scans images, filesystems and IaC for CVEs and misconfigurations.

Examples
trivy image nginx:1.27Scan an image · explain & risk-check →
trivy fs .Scan a project · explain & risk-check →
Related
docker
Open the full explainer →More in Docker & Containers

Reference text is hand-written and may be incomplete — check man trivy for your version. Test destructive commands on a non-production system first.