Trivy for customers scanning their images at Fly.Io.

[timflyio]

fly.io (we sell cloud compute) started using trivy to scan images for our customers. We give them a tool to get a summary of possible vulnerabilities across all their apps, or to pull down an SBOM for an app so that they can use the trivy tool themselves for more detailed reporting. In the future we hope to use it to provide customers with notification when high risk issues come out that might affect them.
Here's a quick post about it: https://community.fly.io/t/half-baked-produce-image-vulnerability-scans/20879

Tim