Trivy scanner

Targets (what Trivy can scan):

  • Container Image

  • Filesystem

  • Git Repository (remote)

  • Virtual Machine Image

  • Kubernetes

  • AWS

Scanners

  • OS packages and software dependencies in use (SBOM)

  • Known vulnerabilities (CVEs)

  • IaC issues and misconfigurations

  • Sensitive information and secrets

  • Software licenses

Trivy is available in most common distribution channels. The full list of installation options is available in the Installation page. Here are a few popular examples:

  • brew install trivy

  • docker run aquasec/trivy

  • Download binary from

PreviousLynis (Linux or mac) vuln scannerNextClair Scanner for docker containers

Last updated