Trivy is the most popular open source security scanner for Vulnerability, IaC, SBOM discovery, cloud scanning and Kubernetes security trivy.dev