aquasecurity/trivy
Scanner for vulnerabilities, misconfigurations, and secrets.
Key features
- Scans container images, filesystems, remote git repos, VMs, and Kubernetes
- Finds known vulnerabilities in OS packages and software dependencies
- Detects infrastructure misconfigurations and sensitive secrets
- Checks software licenses and produces a software bill of materials
- Installs via Homebrew, Docker, or a release binary
- Category
- Trending Repos
- Tags
- githubaquasecuritycontainerspackage-managerversion-controlsecretsimage-videosecurity
- Website
- github.com
- Listed
- 2026-10-12
Frequently asked questions
Is aquasecurity/trivy free?
Yes. aquasecurity/trivy is open source and free to use.
What is aquasecurity/trivy used for?
Scanner for vulnerabilities, misconfigurations, and secrets. Typical uses: scans container images, filesystems, remote git repos, VMs, and Kubernetes; finds known vulnerabilities in OS packages and software dependencies; detects infrastructure misconfigurations and sensitive secrets.
Related in Trending Repos
See all →- addyosmani/agent-skills Engineering skills for AI coding agents, from Addy Osmani.
- anthropics/knowledge-work-plugins Open source plugins for knowledge workers to use in Claude Cowork.
- AtomicBot-ai/atomic-agent Local-first AI agent that runs open-weight models via llama.cpp.
- axios/axios Promise-based HTTP client for the browser and Node.js.
- bevyengine/bevy Data-driven game engine written in Rust.
- bilawalsidhu/gods-eye-view A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.