aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Go38K stars620 forks+26 today
Topics
#security#security-tools#docker#containers#vulnerability-scanners#vulnerability-detection#vulnerability#golang#go#kubernetes#hacktoberfest#devsecops#misconfiguration#infrastructure-as-code#iac
What it does
Trivy is a comprehensive security scanner for containers, Kubernetes, code repositories, and more. It detects vulnerabilities, misconfigurations, secrets, and software licenses, ensuring secure development practices.
Star history
Not enough history yet — 1 day(s) recorded. The daily snapshot builds this up.
Tracking
- Last trending
- 2026-06-04
Creator kit
Hook
Secure your codebase with Trivy - the ultimate security scanner for containers & Kubernetes. #DevSecOps
Content angles
- How to integrate Trivy into your CI/CD pipeline for automated security checks.
- A deep dive into detecting and mitigating secrets in Git repositories using Trivy.
- Comparing Trivy with other security tools: pros, cons, and when to use each.
Who should care
Developers, DevOps engineers, CI/CD pipeline managers, Kubernetes cluster administrators