🔧 Applying SAST to Infrastructure as Code: Unifying Cloud and Container Security with Trivy

Author: Fabrizio Salvador Elias Perez Peralta

Abstract
As Infrastructure as Code (IaC) evolves, the boundary between cloud provisioning and container configuration blurs. This article explores the application of Static Application Security Testing (SAST) using Trivy, an open-source vulnerability scanner listed in the OWASP tools catalog. While my...