Trivy
Security scanner for images and code
aquasecurityThird-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer
About
Trivy scans container images, folders, remote Git repositories, virtual machine images and Kubernetes for security problems. It reports known vulnerabilities, misconfigurations in infrastructure code, exposed secrets and software licenses.
It also lists the operating system packages and dependencies in use, in the form of an SBOM. You can install it with Homebrew or run it in Docker, and it connects with GitHub Actions, a Kubernetes operator and a VS Code plugin, so checks can fit into the way you already work.
Highlights
- Finds known vulnerabilities (CVEs) and exposed secrets
- Scans images, folders, Git repos and Kubernetes
- Lists packages and dependencies as an SBOM
Who it's for
Good for developers and ops teams who want to check containers and code for security issues before shipping.
This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.
Why it is here
- Code changed today
- New release today
Official channels
Official channels only. We never host or repackage downloads.
