Use Trivy to find vulnerabilities (CVE) & misconfigurations (IaC) across code repositories, binary artifacts, container images, and Kubernetes clusters. It's all about the community! Trivy is praised by …

Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

With Aqua Trivy, DevOps teams can get set up and start scanning as fast as development requires. No database dependencies or middleware are required, and integration into the CI/CD pipeline is a …

Official installations are developed by the Trivy team and supported by it. Community installations could be developed by anyone from the Trivy community, and collected here for your convenience. For …

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more - Releases · aquasecurity/trivy

Nov 24, 2024 · Trivy is a powerful open-source vulnerability scanner designed to scan container images, file systems, Git repositories, virtual machine images, Kubernetes, AWS, and more for security issues

Feb 22, 2026 · Trivy is an open-source security scanner for container images, filesystems, and CI/CD artifacts that detects vulnerabilities, misconfigurations, secrets, and IaC issues. Analogy: Trivy is like …

Nov 24, 2025 · This guide walks you through how to automate vulnerability scans using Trivy, integrate it into CI/CD pipelines, and ensure your software stays secure — without slowing down your delivery …

Jun 19, 2026 · Trivy is the most popular open source security scanner, reliable, fast, and easy to use. Use Trivy to find vulnerabilities & IaC misconfigurations, SBOM discovery, Cloud scanning, …

On March 19, 2026, Trivy, Aqua Security’s widely used open-source vulnerability scanner, was reported to have been compromised in a sophisticated CI/CD-focused supply chain attack.