← Discover
Discover · GitHub · Trivy↑ +24 today

Container and cloud security scanner

Trivy is a comprehensive security scanning tool that detects vulnerabilities, misconfigurations, and secrets in containers, Kubernetes clusters, and cloud infrastructures. It automates security audits in development processes with the ability to create software bill of materials (SBOM).

What you get

  • Detects security vulnerabilities in container images.
  • Checks for software dependencies and misconfigurations.
  • Prevents leaks by scanning private keys and sensitive information.

Installation

macOS (Homebrew)
brew install trivy
Windows (winget)
winget install AquaSecurity.Trivy

Running it

Scan container image
trivy image imaj-adi:etiket

If you don't write code

🤖 Paste this into your AI agent (Claude Code · Codex · Antigravity)

How can I scan for vulnerabilities, misconfigurations, and secret keys in a container image using the Trivy tool? Similar to the 'trivy image python:3.4-alpine' command, can you please explain the basic command structure and scanning options so I can perform a security audit on my own projects or local files?

Related dictionary terms

SecretsSBOMArtificial Intelligence
Who it is forIt is for developers and system administrators who want to automate security audits in their software development processes.
LicenseApache-2.0

Links

TreScout did not build this tool · we found it in GitHub trends and wrote it up. This page describes the repository as of 2026-06-04: The star count and our text belong to that day, the repository may have changed since. Check the repository link for the current state. This page was machine-translated from the Turkish original · the Turkish version prevails.