Trivy supports the scanners listed in the table below.
It supports the following formats.
Trivy recursively searches directories and scans all found CloudFormation files. It evaluates properties, functions, and other elements within CloudFormation files to detect misconfigurations.
The secret scan is performed on plain text files, with no special treatment for CloudFormation.