Scan containers, filesystems, repositories, and infrastructure code with Trivy, then triage CVEs and configure CI thresholds.
