Vulnerability Scanning

---
name: vulnerability-scanning
description: "Scan dependencies with trivy grype and pip audit"
---

# Vulnerability Scanning

## Python Dependencies
```bash
pip install pip-audit
pip-audit

pip install safety
safety check
```

## Containers (Trivy)
```bash
trivy image myapp:latest
trivy fs --scanners vuln .
```

## Grype
```bash
grype myapp:latest
grype dir:.
```

## CI Integration
```yaml
- run: pip-audit || true  # Warnings only
```