Vigilance vs Trivy
Trivy. Scans containers, folders and repositories for known bugs, bad settings and committed passwords. It is free and runs anywhere.
Vigilance. Compares two copies of the same software and says what the new one can suddenly do.
Side by side
| Question | Trivy | Vigilance |
|---|---|---|
| Finds a known bug in a container | Yes | No |
| Finds a bad setting or a committed password | Yes | No |
| Compares this version against the last one | No | Yes |
| Spots a file that can suddenly run commands | No | Yes |
| Spots a container that starts a different program on boot | No | Yes |
| Keeps a tamper proof record of every check | No | Yes |
Which one do you need?
Use both. Trivy finds what is known to be bad today. Vigilance finds what is new since last time.
Try it on your own software.
Show it the version you run today and the one you are about to install.