Trivy

aquasecurity/trivy
Download & install Download and install locally. No server needed.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

SecurityVulnerability scanningCommand line
Trivy website screenshot

From the README

Trivy ([pronunciation][pronunciation]) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Stars
★ 38.0k
Language
Go
License
Apache-2.0
Last updated
2026-09-23
Category
Security & privacy
Section
General