Trivy
Vulnerability ScanningTrivy is a comprehensive security scanner that detects vulnerabilities, misconfigurations, secrets, and software licenses across containers, filesystems, Git repos, VM images, and Kubernetes.
Features
- Scans container images for OS package vulnerabilities and SBOM data
- Audits local filesystems for CVEs, secrets, and misconfigurations
- Analyzes Git repositories (remote) for IaC issues and sensitive information
- Examines virtual machine images for security flaws
- Inspects Kubernetes clusters for policy violations and vulnerabilities
Recent releases
View all 7 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
brew
docker
binary
Community & Support
Similar tools
Alternative to
Aqua