Skip to content

Trivy

Overview

Trivy

HOME
Getting started
Getting started
Docs
Docs
- Overview
- Vulnerability
  Vulnerability
  - Scanning
    Scanning
    
    Overview
    
    Container Image
    
    Filesystem
    
    Rootfs
    
    Git Repository
  - Detection
    Detection
    
    OS Packages
    
    Language-specific Packages
    
    Data Sources
    
    Supported
  - Examples
    Examples
    
    Vulnerability Filtering
    
    Report Formats
    
    Vulnerability DB
    
    Cache
    
    Others
  - Distributions
  - Languages
    Languages
    
    Go
- Misconfiguration
  Misconfiguration
  - Scanning
    Scanning
    
    Overview
    
    Infrastructure as Code
    
    Filesystem
  - Policy
    Policy
    
    Built-in Policies
    
    Exceptions
  - Custom Policies
    Custom Policies
    
    Overview
    
    Data
    
    Combine
    
    Testing
    
    Debugging Policies
    
    Examples
  - Options
    Options
    
    Policy
    
    Filtering
    
    Report Formats
    
    Others
  - Comparison
    Comparison
    
    vs Conftest
    
    vs tfsec
    
    vs cfsec
- SBOM
  SBOM
  - Overview
  - CycloneDX
- Integrations
  Integrations
- Advanced
  Advanced
  - Plugins
  - Air-Gapped Environment
  - Container Image
    Container Image
    
    Embed in Dockerfile
    
    Unpacked container image filesystem
    
    OCI Image
    
    Podman
    
    Private Docker Registries
    Private Docker Registries
    
    Overview
    
    Docker Hub
    
    AWS ECR (Elastic Container Registry)
    
    GCR (Google Container Registry)
    
    ACR (Azure Container Registry)
    
    Self-Hosted
- References
  References
  - CLI
    CLI
    
    Overview
    
    Image
    
    Config
    
    Filesystem
    
    Rootfs
    
    Repository
    
    Client
    
    Server
    
    Plugins
    
    SBOM
  - Modes
    Modes
    
    Standalone
    
    Client/Server
  - Troubleshooting
Community
Community
- Tools
- References
- CKS Reference
- Credits
- How to contribute
  How to contribute
  - Issues
  - Pull Requests
- Maintainer
  Maintainer
  - Help Wanted
  - Triage

Vulnerability Scanning

Trivy scans Container Images, Rootfs, Filesystem, and Git Repositories to detect vulnerabilities.

vulnerability