Scanning images and infrastructure files with Trivy

Objective

Learn to use Trivy to find, before going to production, the known flaws of a container image or a project, and the configuration errors of infrastructure files (Dockerfile, Kubernetes manifests, Terraform/OpenTofu). You will also learn to turn it into a rule: a shared policy file, justified and dated exceptions, and an exit code that blocks CI.