Chainguard
Trivy supports the following scanners for OS packages.
| Scanner | Supported |
|---|---|
| SBOM | ✓ |
| Vulnerability | ✓ |
| License | ✓ |
The table below outlines the features offered by Trivy.
| Feature | Supported |
|---|---|
| Detect unfixed vulnerabilities | - |
| Dependency graph | ✓ |
SBOM
Same as Alpine Linux.
Vulnerability
Chainguard offers its own security advisories, and these are utilized when scanning Chainguard for vulnerabilities. Everything else is the same as Alpine Linux.
Data Source
See here.
License
Same as Alpine Linux.