Create a trivy plugin for own CVE query

[alfeilex]

Question

Hello,

I would like to ask if it's possible to create a trivy plugin that uses the query components to search for specific CVE's that match a vendor, or product and version. Is there an API to using the database for other languages like Java?

Finally, we want to include trivy in our CLI tool, but we are looking for a functionality so that the user can search for a CVE given the vendor/product and version. The output for that query should include matching CVE's and perhaps references/fixed versions and severity.

Thank you

Target

None

Scanner

Vulnerability

Output Format

JSON

Mode

None

Operating System

No response

Version

No response

[itaysk]

this is out of scope for trivy. you can try to query the trivy db directly

[knqyf263]

I'd recommend boltwiz to query Trivy DB.