t0mmili/jenkins-inbound-agent-trivy repository overview

⁠Jenkins Inbound Agent Trivy

A lightweight Jenkins agent image designed for security-focused CI/CD pipelines. It extends the official jenkins/inbound-agent:alpine and adds Trivy, a fast and reliable vulnerability scanner for containers and filesystems.

This image is ideal for integrating security scanning directly into your Jenkins workflows without additional setup.

⁠Included Components

• Jenkins Inbound Agent (Alpine-based)
• Trivy
• Common utilities:
  • curl
  • bash
  • libcurl

⁠Use Cases

• Container image vulnerability scanning in Jenkins pipelines
• Filesystem and dependency scanning
• Shift-left security in CI/CD
• Integration with:
  • Docker images (local or remote)
  • Git repositories
  • Artifact scanning workflows

⁠Quick Start

docker run -d t0mmili/jenkins-inbound-agent-trivy

⁠Security Notes

• Runs as jenkins user by default
• Trivy cache directory is preconfigured and writable
• Regularly update image to receive latest vulnerability database and scanner updates

⁠Contribution

Go to GitHub⁠