Trivy
Vulnerability ScanningTrivy is a comprehensive security scanner that detects vulnerabilities, misconfigurations, secrets, and licenses across container images, file systems, Git repos, VMs, and Kubernetes clusters.
Features
- Scans container images for OS package vulnerabilities and SBOMs
- Audits filesystems for secrets, misconfigurations, and license information
- Analyzes Git repositories (remote) for IaC issues and vulnerable dependencies
- Evaluates virtual machine images for CVEs and compliance problems
- Inspects Kubernetes resources for security misconfigurations
Recent releases
View all 4 releases →No releases yet
We'll surface new releases as they're published — check back soon.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
brew
docker
binary
Community & Support
Alternative to
Aqua