DEDUPEDWho it is forA developer cleaning up a project before open sourcing it or handing it to a client.
The problemSeparate tools for dependencies, secrets and Terraform or Kubernetes files are a hassle to run together.
The outcomeOne report covering vulnerable dependencies, exposed secrets and infrastructure misconfigurations.
What you need first
- Trivy via `brew install trivy`, the aquasec/trivy Docker image, or a release binary
- Access to the image, folder, repo or Kubernetes cluster you want to scan
Steps
- Install Trivy with
brew install trivy - Run
trivy fs --scanners vuln,secret,misconfig myproject/on your project folder - Fix or rotate any secrets it finds first
- Upgrade the flagged dependencies and correct the IaC issues and misconfigurations
- Rerun the same command until the report is clean enough to ship
Prompt for your agent
Run aquasecurity/trivy fs with the vuln, secret and misconfig scanners on <project folder>. Group the findings by type, propose fixes for each, and list any secrets I must rotate.
Caveat. Misconfiguration checks follow general best practice, so some findings may be intentional choices for your environment.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for aquasecurity/trivy and "Check a project folder for vulnerabilities, secrets and misconfigurations"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer