Trivy Plugins
Below you will find the list of Trivy plugins distributed on the centralized trivy-plugin-index. To install these plugins on your machine:
- Install the latest version of Trivy
- Run
trivy plugin install <PLUGIN_NAME>to install a plugin.
| Name | Description | Maintainer | Output | Repository |
|---|---|---|---|---|
| aqua | Send results to Aqua Security | aquasecurity |  | |
| aws | Trivy AWS Cloud scanning plugin | aquasecurity |  | |
| count | Count vulnerabilities | aquasecurity | ✓ |  |
| kubectl | Scan kubectl resources | aquasecurity |  | |
| mcp | Starts an MCP server that knows how to work with Trivy | aquasecurity |  | |
| referrer | Put referrers to OCI registry | aquasecurity |  | |
| scan2html | A Trivy plugin that scans and outputs the results to a single page app. | fatihtokus |  | |
| sonarqube | Convert Trivy JSON report to SonarQube format | umax |  | |
| vexllm | Silence negligible CVE alerts using LLM | AkihiroSuda |  | |
| zarf | Scan Zarf packages for vulnerabilities | willswire |  |