aquasecurity / trivy
git clone https://github.com/aquasecurity/trivy.git
v0.76.0 · 9d ago
🔥 on GitHub Trending today
Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.
Why you might care
Useful for teams that want one scanner covering CVEs, IaC misconfigurations, secrets, and licenses across container images and code without running a separate tool for each. It is a Go project distributed as a binary and Docker image, and it integrates with CI systems such as GitHub Actions.
+42
stars, 24h · #837
+~229
stars, 7 days · #1,027
+688
stars, 30 days · #1,260
39k
★ total · +1% this week
795
forks · 277 open issues
Star history (as recorded here)
LanguageGo
LicenseApache-2.0
Created2019-04-11 (7y ago)
Last push1d ago
Watchers232
OwnerOrganization
Seen on GitHub Trending
- 2026-10-24 — #2 daily in go · +52 ★
- 2026-10-24 — #21 monthly in go · +688 ★
- 2026-10-23 — #9 daily in go · +46 ★
GitHub topics
containersdevsecopsdockergogolanghacktoberfestiacinfrastructure-as-codekubernetesmisconfigurationsecuritysecurity-toolsvulnerabilityvulnerability-detectionvulnerability-scanners
Links
- GitHub: github.com/aquasecurity/trivy
- Homepage: https://trivy.dev
- Releases · Issues · Hacker News mentions
README
Loading README…
Blurb generated by claude-haiku-5-5 1d ago. Star deltas marked ~ are extrapolated from partial history.