# SCA/Secret/Misconfig - Trivy FS **Fecha:** 2026-06-03 14:29:38 **Proyecto:** `/Users/oq/Developer/multi-php-docker/php-prod/sasis` **Descripción:** Escaneo de vulnerabilidades, secretos y misconfiguraciones con Trivy. ## Comando ```bash docker run --rm -v "$PWD:/src" aquasec/trivy:latest fs --scanners vuln,secret,misconfig --skip-dirs /src/mgmt/vendor --skip-dirs /src/api/phpseclib --skip-dirs /src/pruebas/security /src ``` ## Salida **Estado:** `0` ```text 2026-06-03T20:29:41Z INFO [vulndb] Need to update DB 2026-06-03T20:29:41Z INFO [vulndb] Downloading vulnerability DB... 2026-06-03T20:29:41Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2" 191.25 KiB / 94.90 MiB [>____________________________________________________________] 0.20% ? p/s ?703.21 KiB / 94.90 MiB [>____________________________________________________________] 0.72% ? p/s ?1.47 MiB / 94.90 MiB [>______________________________________________________________] 1.55% ? p/s ?2.59 MiB / 94.90 MiB [->________________________________________________] 2.73% 4.01 MiB p/s ETA 22s3.73 MiB / 94.90 MiB [->________________________________________________] 3.93% 4.01 MiB p/s ETA 22s4.80 MiB / 94.90 MiB [-->_______________________________________________] 5.05% 4.01 MiB p/s ETA 22s5.84 MiB / 94.90 MiB [--->______________________________________________] 6.16% 4.10 MiB p/s ETA 21s7.03 MiB / 94.90 MiB [--->______________________________________________] 7.41% 4.10 MiB p/s ETA 21s7.97 MiB / 94.90 MiB [---->_____________________________________________] 8.40% 4.10 MiB p/s ETA 21s8.48 MiB / 94.90 MiB [---->_____________________________________________] 8.94% 4.12 MiB p/s ETA 20s8.48 MiB / 94.90 MiB [---->_____________________________________________] 8.94% 4.12 MiB p/s ETA 20s9.95 MiB / 94.90 MiB [----->___________________________________________] 10.49% 4.12 MiB p/s ETA 20s10.41 MiB / 94.90 MiB [----->__________________________________________] 10.97% 4.06 MiB p/s ETA 20s11.25 MiB / 94.90 MiB [----->__________________________________________] 11.85% 4.06 MiB p/s ETA 20s12.06 MiB / 94.90 MiB [------>_________________________________________] 12.71% 4.06 MiB p/s ETA 20s12.44 MiB / 94.90 MiB [------>_________________________________________] 13.11% 4.02 MiB p/s ETA 20s12.44 MiB / 94.90 MiB [------>_________________________________________] 13.11% 4.02 MiB p/s ETA 20s12.98 MiB / 94.90 MiB [------>_________________________________________] 13.68% 4.02 MiB p/s ETA 20s13.80 MiB / 94.90 MiB [------>_________________________________________] 14.54% 3.91 MiB p/s ETA 20s15.34 MiB / 94.90 MiB [------->________________________________________] 16.17% 3.91 MiB p/s ETA 20s16.67 MiB / 94.90 MiB [-------->_______________________________________] 17.57% 3.91 MiB p/s ETA 20s17.62 MiB / 94.90 MiB [-------->_______________________________________] 18.57% 4.07 MiB p/s ETA 19s18.14 MiB / 94.90 MiB [--------->______________________________________] 19.12% 4.07 MiB p/s ETA 18s19.28 MiB / 94.90 MiB [--------->______________________________________] 20.32% 4.07 MiB p/s ETA 18s20.52 MiB / 94.90 MiB [---------->_____________________________________] 21.62% 4.11 MiB p/s ETA 18s21.73 MiB / 94.90 MiB [---------->_____________________________________] 22.90% 4.11 MiB p/s ETA 17s23.02 MiB / 94.90 MiB [----------->____________________________________] 24.25% 4.11 MiB p/s ETA 17s24.02 MiB / 94.90 MiB [------------>___________________________________] 25.31% 4.23 MiB p/s ETA 16s24.64 MiB / 94.90 MiB [------------>___________________________________] 25.96% 4.23 MiB p/s ETA 16s24.92 MiB / 94.90 MiB [------------>___________________________________] 26.26% 4.23 MiB p/s ETA 16s25.56 MiB / 94.90 MiB [------------>___________________________________] 26.94% 4.12 MiB p/s ETA 16s27.17 MiB / 94.90 MiB [------------->__________________________________] 28.63% 4.12 MiB p/s ETA 16s28.17 MiB / 94.90 MiB [-------------->_________________________________] 29.69% 4.12 MiB p/s ETA 16s29.00 MiB / 94.90 MiB [-------------->_________________________________] 30.56% 4.22 MiB p/s ETA 15s30.11 MiB / 94.90 MiB [--------------->________________________________] 31.73% 4.22 MiB p/s ETA 15s31.08 MiB / 94.90 MiB [--------------->________________________________] 32.75% 4.22 MiB p/s ETA 15s31.28 MiB / 94.90 MiB [--------------->________________________________] 32.96% 4.20 MiB p/s ETA 15s33.28 MiB / 94.90 MiB [---------------->_______________________________] 35.07% 4.20 MiB p/s ETA 14s34.53 MiB / 94.90 MiB [----------------->______________________________] 36.39% 4.20 MiB p/s ETA 14s35.45 MiB / 94.90 MiB [----------------->______________________________] 37.36% 4.37 MiB p/s ETA 13s36.73 MiB / 94.90 MiB [------------------>_____________________________] 38.71% 4.37 MiB p/s ETA 13s37.78 MiB / 94.90 MiB [------------------->____________________________] 39.81% 4.37 MiB p/s ETA 13s38.34 MiB / 94.90 MiB [------------------->____________________________] 40.40% 4.40 MiB p/s ETA 12s39.89 MiB / 94.90 MiB [-------------------->___________________________] 42.03% 4.40 MiB p/s ETA 12s40.77 MiB / 94.90 MiB [-------------------->___________________________] 42.95% 4.40 MiB p/s ETA 12s41.83 MiB / 94.90 MiB [--------------------->__________________________] 44.07% 4.49 MiB p/s ETA 11s43.06 MiB / 94.90 MiB [--------------------->__________________________] 45.38% 4.49 MiB p/s ETA 11s44.11 MiB / 94.90 MiB [---------------------->_________________________] 46.48% 4.49 MiB p/s ETA 11s44.37 MiB / 94.90 MiB [---------------------->_________________________] 46.76% 4.48 MiB p/s ETA 11s45.22 MiB / 94.90 MiB [---------------------->_________________________] 47.65% 4.48 MiB p/s ETA 11s46.27 MiB / 94.90 MiB [----------------------->________________________] 48.75% 4.48 MiB p/s ETA 10s47.17 MiB / 94.90 MiB [----------------------->________________________] 49.71% 4.49 MiB p/s ETA 10s48.02 MiB / 94.90 MiB [------------------------>_______________________] 50.59% 4.49 MiB p/s ETA 10s49.89 MiB / 94.90 MiB [------------------------->______________________] 52.57% 4.49 MiB p/s ETA 10s50.78 MiB / 94.90 MiB [-------------------------->______________________] 53.51% 4.59 MiB p/s ETA 9s52.12 MiB / 94.90 MiB [-------------------------->______________________] 54.92% 4.59 MiB p/s ETA 9s52.89 MiB / 94.90 MiB [--------------------------->_____________________] 55.73% 4.59 MiB p/s ETA 9s53.62 MiB / 94.90 MiB [--------------------------->_____________________] 56.51% 4.60 MiB p/s ETA 8s55.08 MiB / 94.90 MiB [---------------------------->____________________] 58.04% 4.60 MiB p/s ETA 8s56.05 MiB / 94.90 MiB [---------------------------->____________________] 59.06% 4.60 MiB p/s ETA 8s57.14 MiB / 94.90 MiB [----------------------------->___________________] 60.21% 4.68 MiB p/s ETA 8s58.25 MiB / 94.90 MiB [------------------------------>__________________] 61.38% 4.68 MiB p/s ETA 7s59.39 MiB / 94.90 MiB [------------------------------>__________________] 62.58% 4.68 MiB p/s ETA 7s60.37 MiB / 94.90 MiB [------------------------------->_________________] 63.62% 4.72 MiB p/s ETA 7s60.78 MiB / 94.90 MiB [------------------------------->_________________] 64.05% 4.72 MiB p/s ETA 7s62.64 MiB / 94.90 MiB [-------------------------------->________________] 66.01% 4.72 MiB p/s ETA 6s63.86 MiB / 94.90 MiB [-------------------------------->________________] 67.29% 4.80 MiB p/s ETA 6s64.86 MiB / 94.90 MiB [--------------------------------->_______________] 68.34% 4.80 MiB p/s ETA 6s65.87 MiB / 94.90 MiB [---------------------------------->______________] 69.41% 4.80 MiB p/s ETA 6s66.89 MiB / 94.90 MiB [---------------------------------->______________] 70.48% 4.81 MiB p/s ETA 5s67.95 MiB / 94.90 MiB [----------------------------------->_____________] 71.60% 4.81 MiB p/s ETA 5s68.97 MiB / 94.90 MiB [----------------------------------->_____________] 72.67% 4.81 MiB p/s ETA 5s69.89 MiB / 94.90 MiB [------------------------------------>____________] 73.64% 4.82 MiB p/s ETA 5s70.86 MiB / 94.90 MiB [------------------------------------>____________] 74.66% 4.82 MiB p/s ETA 4s71.55 MiB / 94.90 MiB [------------------------------------>____________] 75.39% 4.82 MiB p/s ETA 4s71.89 MiB / 94.90 MiB [------------------------------------->___________] 75.75% 4.73 MiB p/s ETA 4s73.28 MiB / 94.90 MiB [------------------------------------->___________] 77.22% 4.73 MiB p/s ETA 4s74.27 MiB / 94.90 MiB [-------------------------------------->__________] 78.25% 4.73 MiB p/s ETA 4s76.09 MiB / 94.90 MiB [--------------------------------------->_________] 80.18% 4.87 MiB p/s ETA 3s77.55 MiB / 94.90 MiB [---------------------------------------->________] 81.71% 4.87 MiB p/s ETA 3s79.14 MiB / 94.90 MiB [---------------------------------------->________] 83.39% 4.87 MiB p/s ETA 3s80.48 MiB / 94.90 MiB [----------------------------------------->_______] 84.81% 5.03 MiB p/s ETA 2s82.02 MiB / 94.90 MiB [------------------------------------------>______] 86.42% 5.03 MiB p/s ETA 2s83.19 MiB / 94.90 MiB [------------------------------------------>______] 87.66% 5.03 MiB p/s ETA 2s84.08 MiB / 94.90 MiB [------------------------------------------->_____] 88.59% 5.09 MiB p/s ETA 2s84.30 MiB / 94.90 MiB [------------------------------------------->_____] 88.82% 5.09 MiB p/s ETA 2s85.42 MiB / 94.90 MiB [-------------------------------------------->____] 90.01% 5.09 MiB p/s ETA 1s86.30 MiB / 94.90 MiB [-------------------------------------------->____] 90.93% 5.00 MiB p/s ETA 1s87.94 MiB / 94.90 MiB [--------------------------------------------->___] 92.66% 5.00 MiB p/s ETA 1s89.39 MiB / 94.90 MiB [---------------------------------------------->__] 94.19% 5.00 MiB p/s ETA 1s90.45 MiB / 94.90 MiB [---------------------------------------------->__] 95.31% 5.13 MiB p/s ETA 0s90.94 MiB / 94.90 MiB [---------------------------------------------->__] 95.82% 5.13 MiB p/s ETA 0s92.69 MiB / 94.90 MiB [----------------------------------------------->_] 97.67% 5.13 MiB p/s ETA 0s93.81 MiB / 94.90 MiB [------------------------------------------------>] 98.85% 5.16 MiB p/s ETA 0s94.66 MiB / 94.90 MiB [------------------------------------------------>] 99.74% 5.16 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 5.16 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.62 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.62 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.62 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.33 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.33 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.33 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.05 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.05 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 4.05 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.78 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.78 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.78 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.31 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.31 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.31 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.10 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.10 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 3.10 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.90 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.90 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.90 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.71 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.71 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.71 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.54 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.37 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.37 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.37 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.37 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.22 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.22 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.22 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.08 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.08 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 2.08 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.94 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.82 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.82 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.82 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.70 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.70 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.70 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.59 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.59 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.59 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.49 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.49 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.49 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [----------------------------------------------->] 100.00% 1.39 MiB p/s ETA 0s94.90 MiB / 94.90 MiB [---------------------------------------------------] 100.00% 3.04 MiB p/s 31s2026-06-03T20:47:50Z INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2" 2026-06-03T20:47:50Z INFO [vuln] Vulnerability scanning is enabled 2026-06-03T20:47:50Z INFO [misconfig] Misconfiguration scanning is enabled 2026-06-03T20:47:50Z INFO [checks-client] Need to update the checks bundle 2026-06-03T20:47:50Z INFO [checks-client] Downloading the checks bundle... 143.25 KiB / 234.65 KiB [------------------------------------>______________________] 61.05% ? p/s ?234.65 KiB / 234.65 KiB [-----------------------------------------------] 100.00% 1.45 MiB p/s 400ms2026-06-03T20:47:54Z INFO [secret] Secret scanning is enabled 2026-06-03T20:47:54Z INFO [secret] If your scanning is slow, please try '--scanners vuln,misconfig' to disable secret scanning 2026-06-03T20:47:54Z INFO [secret] Please see https://trivy.dev/docs/v0.71/guide/scanner/secret#recommendation for faster secret detection 2026-06-03T20:48:57Z INFO [npm] Run "npm install" to collect the license information of packages dir="mgmt/node_modules" 2026-06-03T20:48:59Z INFO Number of language-specific files num=3 2026-06-03T20:48:59Z INFO [composer] Detecting vulnerabilities... 2026-06-03T20:48:59Z INFO Detected config files num=0 Report Summary ┌──────────────────────────────────┬──────────┬─────────────────┬─────────┬───────────────────┐ │ Target │ Type │ Vulnerabilities │ Secrets │ Misconfigurations │ ├──────────────────────────────────┼──────────┼─────────────────┼─────────┼───────────────────┤ │ api/composer.lock │ composer │ 1 │ - │ - │ ├──────────────────────────────────┼──────────┼─────────────────┼─────────┼───────────────────┤ │ mgmt/composer.lock │ composer │ 1 │ - │ - │ ├──────────────────────────────────┼──────────┼─────────────────┼─────────┼───────────────────┤ │ mgmt/libreria/mPDF/composer.lock │ composer │ 2 │ - │ - │ └──────────────────────────────────┴──────────┴─────────────────┴─────────┴───────────────────┘ Legend: - '-': Not scanned - '0': Clean (no security findings detected) api/composer.lock (composer) ============================ Total: 1 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0) ┌──────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │ ├──────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────┤ │ firebase/php-jwt │ CVE-2025-45769 │ LOW │ fixed │ v6.11.1 │ 7.0.0 │ php-jwt contains weak encryption │ │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-45769 │ └──────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────┘ mgmt/composer.lock (composer) ============================= Total: 1 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0) ┌──────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │ ├──────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────┤ │ firebase/php-jwt │ CVE-2025-45769 │ LOW │ fixed │ v6.11.1 │ 7.0.0 │ php-jwt contains weak encryption │ │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-45769 │ └──────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────┘ mgmt/libreria/mPDF/composer.lock (composer) =========================================== Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0) ┌───────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │ ├───────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤ │ setasign/fpdi │ CVE-2025-54869 │ MEDIUM │ fixed │ v2.3.6 │ 2.6.4 │ FPDI is a collection of PHP classes that facilitate reading │ │ │ │ │ │ │ │ pages from... │ │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-54869 │ │ ├────────────────┤ │ │ ├───────────────┼─────────────────────────────────────────────────────────────┤ │ │ CVE-2026-45802 │ │ │ │ 2.6.7 │ FPDI: Memory Exhaustion and Endless Loop in FPDI leads to │ │ │ │ │ │ │ │ Denial of... │ │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-45802 │ └───────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘ ```