Trivy Security Scanner

This MCP server implementation provides a Trivy-based security scanning service for AI assistants. Developed by Shay Elmualem, it offers tools to scan projects for vulnerabilities and attempt fixes by updating package versions. The server uses Python and integrates with the Trivy command-line tool, supporting various package managers including pip, npm, RubyGems, and Go modules. It's designed to enhance security in AI-driven development workflows, allowing for automated vulnerability detection and remediation across different programming languages and frameworks. The implementation focuses on clear reporting, error handling, and safe package manifest updates, making it suitable for both development and production environments.

Source

Repository: https://github.com/norbinsh/cursor-mcp-trivy