# Trivy

> Comprehensive security scanner for containers, cloud, and code

- Canonical URL: https://www.fosshunter.com/tools/trivy
- JSON export: https://www.fosshunter.com/tools/trivy.json
- Website: https://github.com/aquasecurity/trivy
- Category: Cybersecurity
- Open source: yes
- Self-hostable: yes
- Verified listing: no
- Featured: no
- Published at: 2026-05-07T17:40:53+00:00
- Catalog revision: `3169132541`

## Repository metrics (point-in-time)

- Repository: https://github.com/aquasecurity/trivy
- Stars: 38970
- Forks: 821
- Open issues: 288
- License: Apache-2.0
- Last push: 2026-11-03T14:32:48+00:00
- Metrics observed at (synced_at): 2026-11-04T11:15:56+00:00
- Archived: no

Tags: CyberSecurity, Security Tools, Vulnerability, AI Security, Vulnerability Scanners, Vulnerability Detection
Tech stacks: docker, go, golang, kubernetes, Shell

## Features
- Performs fast and comprehensive scans for vulnerabilities and CVEs. *(highlighted)*
- Identifies misconfigurations in Kubernetes and Infrastructure as Code. *(highlighted)*
- Detects hardcoded secrets and generates detailed SBOM reports. *(highlighted)*

## Description

Trivy is a comprehensive security scanner that detects vulnerabilities, misconfigurations, and secrets across container images, filesystems, and Kubernetes clusters. It supports SBOM generation and integrates with popular DevSecOps tools.

---
Source: [FOSSHunter — Trivy](https://www.fosshunter.com/tools/trivy) — cite `synced_at` and the catalog revision when quoting metrics.
Interpretation rules: https://www.fosshunter.com/llms-full.txt