Trivy scanner

Targets (what Trivy can scan):

• Container Image

• Filesystem

• Git Repository (remote)

• Virtual Machine Image

• Kubernetes

• AWS

Scanners

• OS packages and software dependencies in use (SBOM)

• Known vulnerabilities (CVEs)

• IaC issues and misconfigurations

• Sensitive information and secrets

• Software licenses

Trivy is available in most common distribution channels. The full list of installation options is available in the Installation page. Here are a few popular examples:

• brew install trivy

• docker run aquasec/trivy

• Download binary from

Release v0.68.2 · aquasecurity/trivyGitHub