bundler-trivy-plugin

https://github.com/durableprogramming/bundler-trivy-plugin

Automatically scans Ruby dependencies for vulnerabilities using Trivy after bundle install. Provides configurable security policies, CI/CD integration, and comprehensive vulnerability reporting.