trivy
A comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOMs in containers, Kubernetes, code, and clouds.
What is trivy?
Trivy is a comprehensive open-source security scanner that finds vulnerabilities, misconfigurations, secrets, and generates SBOMs across various targets like containers, Kubernetes, filesystems, and Git repositories. It consolidates multiple security checks into a single tool to help secure the software supply chain from development to runtime.
DevOps engineers, security teams, and developers who need to integrate security scanning into CI/CD pipelines, containerized environments, and cloud-native infrastructure.
Developers choose Trivy for its all-in-one approach, ease of use, broad target and scanner support, and seamless integration with popular platforms and tools, eliminating the need for multiple specialized security scanners.
Overview
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Use Cases
Best For
- Scanning container images for known vulnerabilities before deployment
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
