services:
  trivy:
    image: aquasec/trivy:latest
    container_name: trivy
    restart: unless-stopped
    command: server --listen 0.0.0.0:4954
    ports:
      - "4954:4954"
    volumes:
      - trivy-cache:/root/.cache/
      - /var/run/docker.sock:/var/run/docker.sock:ro
    mem_limit: 512M
    memswap_limit: 512M
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "3"

volumes:
  trivy-cache: