aquasecurity/trivy ? reverse-engineered prompt

I'd like to build a comprehensive security scanner tool. It should be a command-line app that can help me find common security problems in my projects.

The main thing is that it needs to scan a bunch of different targets, like a local folder of code, a git repository, a Docker container image, and even an entire Kubernetes cluster. When it runs a scan, it should look for several types of issues: known vulnerabilities (like CVEs), bad configurations in my infrastructure files (like Terraform), and any secrets like API keys or passwords that might have been accidentally left in the code. It should also be able to just list all the software packages and dependencies I'm using.

Basically, I want a single, versatile tool to scan for a wide range of security issues across my whole development lifecycle, from my local machine to the cloud.