Trivy

All-in-one security scanner for containers and code

About Trivy

Trivy is a security scanner that finds vulnerabilities and misconfigurations in containers, filesystems, repositories, and Kubernetes clusters. You can deploy it with common tooling such as Docker or a standard package install and integrate it with the systems you already run. In practice it rewards a little setup effort with long-term independence, transparent behavior, and a community that documents real-world deployments.

Trivy key facts

Category: Developer Tools
Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas: scanner, vulnerabilities, containers, security
Official site: trivy.dev

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside Trivy, it includes Clair, Checkov, Terrascan, tfsec.

FreeDeveloper Toolsscannervulnerabilitiescontainerssecurity

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: Clair — Static analysis of vulnerabilities in containers; Checkov — Static code analysis for infrastructure as code; Terrascan — Detect compliance and security violations in IaC.