Trivy
Apache-2.0⚡ Vulnerability Scanning · Go
Trivy is a comprehensive vulnerability scanner capable of analyzing containers, filesystems, git repositories, and Kubernetes configurations. It generates Software Bill of Materials (SBOM) and identifies vulnerabilities by matching known CVEs against the scanned components. Designed for ease of use, Trivy integrates seamlessly into CI/CD pipelines, enabling continuous security assessments. Its broad coverage and support for multiple formats make it a versatile tool for maintaining security across diverse environments.
Tags
Details
- Category
- ⚡ Vulnerability Scanning
- Language
- Go
- Repository
- aquasecurity/trivy
- License
- Apache-2.0
- Platforms
- 🐧linux🍎macos🪟windows
Links
More in Vulnerability Scanning
Nuclei
GoFast vulnerability scanner driven by YAML templates. Thousands of community-contributed detection templates.
sqlmap
PythonAutomatic SQL injection and database takeover tool. Detects and exploits SQL injection flaws.
WPScan
RubyWordPress security scanner. Enumerates plugins, themes, users, and checks for known vulnerabilities.
OpenVAS
CFull-featured vulnerability scanner. 50,000+ NVTs, credentialed scanning, compliance checks.
XSStrike
PythonAdvanced XSS detection suite. Fuzzing engine, context analysis, and WAF detection/bypass capabilities.
Commix
PythonAutomated OS command injection exploitation tool. Tests web apps for command injection vulnerabilities.