{"adoption": {"forks": 635, "observed_at": "2026-08-28T04:12:01.491870+00:00", "stars": 37636}, "canonical_url": "https://ross.abutalabs.com/products/trivy", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more", "domain": ["security", "cloud-computing", "developer-tools"], "enriched": true, "function": ["vulnerability-scanning", "security", "dependency-audit", "secrets-management", "infrastructure-as-code", "developer-tools", "ci-cd"], "health_score": 99, "homepage": "https://trivy.dev", "language": "Go", "license": "Apache-2.0", "license_family": "permissive", "maturity": "stable", "member_repos": ["aquasecurity/trivy", "aquasecurity/trivy-action", "aquasecurity/trivy-operator"], "name": "Trivy", "platform": ["windows", "cli", "go"], "pushed_at": "2026-08-21T13:35:07+00:00", "repo": "aquasecurity/trivy", "stars": 37636, "tags": ["sbom", "cve-scanning", "misconfiguration-detection", "secret-scanning", "container-security", "kubernetes-security", "iac-scanning", "devsecops", "license-compliance", "devops", "containers", "linux", "macos", "docker", "kubernetes"], "topics": ["security", "security-tools", "docker", "containers", "vulnerability-scanners", "vulnerability-detection", "vulnerability", "golang", "go", "kubernetes", "hacktoberfest", "devsecops", "misconfiguration", "infrastructure-as-code", "iac"], "urls": [{"kind": "homepage", "url": "https://trivy.dev"}, {"kind": "site_page", "url": "https://trivy.dev/docs/latest/getting-started"}, {"kind": "site_page", "url": "https://trivy.dev/docs"}], "use_cases": ["scan container images for known CVEs before pushing to a registry", "find exposed secrets and API keys in a code repository", "detect Terraform and Kubernetes misconfigurations in IaC files", "generate an SBOM of OS packages and dependencies", "audit a Kubernetes cluster for security issues", "add vulnerability scanning to CI/CD pipelines with GitHub Actions", "check software license compliance across dependencies"], "what_it_is": "Trivy is an all-in-one open-source security scanner that finds vulnerabilities (CVEs), IaC misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters. It is a Go-based CLI tool with integrations including a GitHub Action, a Kubernetes operator, and a VS Code extension.", "when_to_avoid": ["you need full commercial security management with policy enforcement and reporting dashboards", "you require dynamic application security testing (DAST) or runtime threat detection", "you need SAST for deep code-flow analysis rather than dependency and config scanning"], "when_to_choose": ["you need a single free tool covering vulnerabilities, secrets, misconfigurations, and SBOM generation", "you want container, Kubernetes, filesystem, and git repo scanning in one CLI", "you need easy CI/CD integration via GitHub Actions or a Kubernetes operator", "you want a widely adopted, actively maintained scanner with permissive Apache-2.0 licensing"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/repos/aquasecurity/trivy", "repo": "aquasecurity/trivy", "role": "main", "score": 98}, {"path": "/repos/aquasecurity/trivy-operator", "repo": "aquasecurity/trivy-operator", "role": "backend", "score": 99}, {"path": "/repos/aquasecurity/trivy-action", "repo": "aquasecurity/trivy-action", "role": "plugin", "score": 88}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:12:01.491870+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T16:25:22.819134+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "b04221382fc2df01f28d46bb824e13ff2f5c7bec2a849e73b8616230dde22d62", "fetched_at": "2026-08-28T04:12:01.491870+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/trivy"}, {"content_hash": "4f7592ce3fabaafb1991442904a995107b8f6eda0aaf377e1c702a8eaffca191", "fetched_at": "2026-08-29T07:47:10.533479+00:00", "kind": "homepage", "missing": false, "url": "https://trivy.dev"}, {"content_hash": "faea6d27bd87ca8745bf7529ea05e1a92cd6989b847b8705bb01e95c94597765", "fetched_at": "2026-08-29T07:47:10.536528+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs/latest/getting-started"}, {"content_hash": "0f971f3f3e2e02566156ae943bac0f124117968ff8899bece982a50fd8df54f7", "fetched_at": "2026-08-29T07:47:10.538667+00:00", "kind": "site_page", "missing": false, "url": "https://trivy.dev/docs"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 98, "longevity": 100, "rhythm": 98}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2702, "days_push": 12, "days_rel": 19, "gap_med": 12.0, "n_releases_24m": 9}, "score": 98, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}