|Project Name||Stars||Downloads||Repos Using This||Packages Using This||Most Recent Commit||Total Releases||Latest Release||Open Issues||License||Language|
|Trivy||19,546||58||13 hours ago||205||November 06, 2023||199||apache-2.0||Go|
|Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more|
|Authelia||18,043||2||14 hours ago||64||October 28, 2019||102||apache-2.0||Go|
|The Single Sign-On Multi-Factor portal for web apps|
|Clair||9,815||35||23||a day ago||139||March 21, 2022||26||apache-2.0||Go|
|Vulnerability Static Analysis for Containers|
|Threatmapper||4,504||14 hours ago||24||November 20, 2023||196||apache-2.0||TypeScript|
|Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.|
|Kube Hunter||4,482||2||21 days ago||18||May 12, 2022||80||apache-2.0||Python|
|Hunt for security weaknesses in Kubernetes clusters|
|Contour||3,541||39||13 hours ago||175||October 30, 2023||357||apache-2.0||Go|
|Contour is a Kubernetes ingress controller using Envoy proxy.|
|Cdk||3,267||2 months ago||35||March 12, 2023||14||apache-2.0||Go|
|📦 Make security testing of K8s, Docker, and Containerd easier.|
|Django Defectdojo||3,155||11 hours ago||419||bsd-3-clause||HTML|
|ASPM, DevSecOps, Vulnerability Management. All on one platform.|
|Dockle||2,534||2||12 days ago||75||July 09, 2023||30||apache-2.0||Go|
|Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start|
|Starboard||1,331||8||a month ago||116||October 23, 2023||56||apache-2.0||Go|
|Moved to https://github.com/aquasecurity/trivy-operator|
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Targets (what Trivy can scan):
Scanners (what Trivy can find there):
Trivy supports most popular programming languages, operating systems, and platforms. For a complete list, see the Scanning Coverage page.
Trivy is available in most common distribution channels. The full list of installation options is available in the Installation page. Here are a few popular examples:
brew install trivy
docker run aquasec/trivy
Trivy is integrated with many popular platforms and applications. The complete list of integrations is available in the Ecosystem page. Here are a few popular examples:
Please be aware: canary builds might have critical bugs, it's not recommended for use in production.
trivy <target> [--scanners <scanner1,scanner2>] <subject>
trivy image python:3.4-alpine
trivy fs --scanners vuln,secret,misconfig myproject/
trivy k8s --report summary cluster
tri is pronounced like trigger,
vy is pronounced like envy.
If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering.
You can find a high level comparison table specific to Trivy users here.
In addition check out the https://aquasec.com website for more information about our products and services. If you'd like to contact Aqua or request a demo, please use this form: https://www.aquasec.com/demo
Trivy is an Aqua Security open source project.
Learn about our open source work and portfolio here.
Contact us about any matter by opening a GitHub Discussion here Join our Slack community to stay up to date with community efforts.
Please ensure to abide by our Code of Conduct during all interactions.