Tamp.Trivy

Tamp wrapper for Aqua Security's trivy CLI — image / IaC config / filesystem scanning with SARIF output for the Tamp security pipeline.

Package	Status
Tamp.Trivy	1.11.2 (post-migration from main tamp)

Install

dotnet add package Tamp.Trivy

Multi-targets net8 / net9 / net10.

Why a satellite repo

This package previously shipped from the main tamp repo (up to 1.11.1). It moved to its own satellite at 1.11.2 (TAM-254) so:

• Tool releases don't gate Tamp.Core releases (and vice versa).
• Adopters can pin the wrapper independently of Tamp.Core minors.
• The wrapper's release cadence tracks the wrapped tool instead of the whole framework.

Package ID, namespace, public API, and version line are unchanged — adopters see no break.

License

MIT — see LICENSE.