Trivy
The all-in-one open-source security scanner — containers, code, IaC, SBOMs.
Open source · Apache-2.0Free#security#containers#scanning#open-source
What is Trivy?
Trivy, from Aqua Security, scans container images, filesystems, git repositories, and Kubernetes clusters for vulnerabilities, misconfigurations, exposed secrets, and license issues, and generates SBOMs. A single fast binary makes it the easiest serious scanner to put in CI.
User reviews
User reviews are coming soon. We’re building a moderated review system so real-world experience — good and bad — can live alongside our editorial take. In the meantime, you can share feedback or flag corrections on GitHub.