Wiz

Wiz consumes the Seal vulnerability feed natively for OS-layer packages. No customer-side configuration is required.

Wiz is a cloud security platform that includes vulnerability assessment against running workloads and container images. Wiz natively consumes the Seal vulnerability feed; sealed packages it covers are recognized as remediated out of the box.

Coverage

Wiz today recognizes sealed packages in the OS-level ecosystems (apk, apt / dpkg, yum / dnf) across Linux distributions. Application-layer ecosystems (npm, pip, Maven, Go, and so on) are not covered by the Wiz integration yet.

For application-layer scanners, Trivy is the broader-coverage option today.

Customer-side setup

None. Wiz scans against your environment continue as configured; sealed OS packages are scored from the feed.

Related

• The Seal vulnerability feed

• VEX records

• Trivy