Skip to content

[GitHub Trending] aquasecurity/trivy

7.8 relevance
Score Breakdown
technical depth
8
novelty
5
actionability
9
community
9
strategic
8
personal
9

Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.

Trivy is essential for cloud security scanning, highly actionable and strategically important.

Cloud github.com
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more - aquasecurity/trivy
Summary

Trivy is an open-source security scanner from Aqua Security that targets container images, filesystems, git repos, VM images, and Kubernetes. It scans for OS packages/SBOM, CVEs, IaC misconfigurations, secrets, and software licenses across multiple languages and platforms. Integrations include GitHub Actions, Kubernetes operator, and VS Code plugin, with installation via brew or Docker.

Author

aquasecurity