Im configuring my server and using trivy to scan for vulnerabilities. Trivy finds a lot of high and critical vulnerabilites with cve codes attached wether i run it on the server or on containers images i will run on the server.
I would like to find an automatic way to correct these cve.
To be more specific : i have run apt update, apt upgrade and apt dist-upgrade, but trivy still finds a lot of high and critical vulnerabilities.
I have tried to look for "vulnerability remediation" on google, but i dont find much automatic vulnerability patchers out there. It's mainly about scanning, which is already good but i dont really know what to do with what trivy is telling me...
Is there any open source/free tools to do so ?
Thank you