T

trivy

Self-hosted Kubernetes image vulnerability monitor for a fleet of clusters. Runs on its own VM outside every cluster it watches, reads each with a read-only credential, and assesses images either from an in-cluster agent or from their own registry. Trivy in isolated workers; never writes to a monitored cluster.

CI/CD pipeline and container configuration for the Tetris App. Jenkins builds, scans, versions, and pushes the image on every commit. ArgoCD picks up the change and triggers a canary rollout on EKS.