Google Distroless Images
Trivy supports the following scanners for OS packages.
| Scanner | Supported |
|---|---|
| SBOM | ✓ |
| Vulnerability | ✓ |
| License | ✓ |
Please see here for supported versions.
The table below outlines the features offered by Trivy.
| Feature | Supported |
|---|---|
| Unfixed vulnerabilities | - |
| Dependency graph | ✓ |
SBOM
Trivy detects packages pre-installed in distroless images.
Vulnerability
Google Distroless is based on Debian; see there for details.
License
Google Distroless is based on Debian; see there for details.