Tool integration

Aqua Security Integration Guide

Full-stack cloud native security platform — use Trivy OSS for CLI scanning

Get a Free API Key

Integrate Aqua Security with Vulnetix. Use Trivy (Aqua's open-source scanner) or the Aqua Platform to scan containers, IaC, and code. Export SARIF or JSON findings for upload to Vulnetix.

SaaS platformSARIFJSONCycloneDX

Run Aqua Security in CI

Scan on every push and upload the results to Vulnetix:

- name: Build image
  run: docker build -t myapp:${{ github.sha }} .

- name: Trivy container scan
  uses: aquasecurity/trivy-action@master
  with:
    image-ref: myapp:${{ github.sha }}
    format: sarif
    output: trivy.sarif
    severity: CRITICAL,HIGH

- name: Upload to Vulnetix
  run: vulnetix upload --file trivy.sarif

Centralise Aqua Security results in Vulnetix

Upload Aqua Security SARIF, JSON, CycloneDX output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

Aqua Security documentation ↗

Wire Aqua Security into your CI/CD pipeline →