Skip to content

Trivy

Overview

Trivy

Getting Started
Getting Started
- Overview
- Installation
Tutorials
Tutorials
- Overview
- CI/CD
  CI/CD
- Signing
  Signing
  - Vulnerability Scan Record Attestation
- Kubernetes
  Kubernetes
- Additional Resources
  Additional Resources
CLI
CLI
- Overview
- Vulnerability
  Vulnerability
  - Scanning
    Scanning
    
    Overview
    
    Container Image
    
    Filesystem
    
    Rootfs
    
    Git Repository
  - Detection
    Detection
    
    OS Packages
    
    Language-specific Packages
    
    Data Sources
    
    Supported
  - Examples
    Examples
    
    Vulnerability Filtering
    
    Report Formats
    
    Vulnerability DB
    
    Cache
    
    Others
  - Distributions
  - Languages
    Languages
    
    Go
- Misconfiguration
  Misconfiguration
  - Scanning
  - Policy
    Policy
    
    Built-in Policies
    
    Exceptions
  - Custom Policies
    Custom Policies
    
    Overview
    
    Data
    
    Combine
    
    Testing
    
    Debugging Policies
    
    Examples
  - Options
    Options
    
    Policy
    
    Filtering
    
    Report Formats
    
    Value Overrides
    
    Others
  - Comparison
    Comparison
    
    vs Conftest
    
    vs tfsec
    
    vs cfsec
- Secret
  Secret
- License
  License
  - Scanning
- Kubernetes
  Kubernetes
  - CLI
    CLI
    
    Scanning
    
    Compliance
  - Operator
    Operator
    
    Overview
- Cloud
  Cloud
  - AWS
- Virtual Machine Image
  Virtual Machine Image
  - Overview
  - AWS EC2
- Compliance
  Compliance
  - Reports
- SBOM
  SBOM
  - Overview
  - CycloneDX
  - SPDX
- Attestation
  Attestation
- Advanced
  Advanced
  - Modules
  - Plugins
  - Air-Gapped Environment
  - Container Image
    Container Image
    
    Embed in Dockerfile
    
    Unpacked container image filesystem
    
    OCI Image
    
    Podman
    
    containerd
    
    Private Docker Registries
    Private Docker Registries
    
    Overview
    
    Docker Hub
    
    AWS ECR (Elastic Container Registry)
    
    GCR (Google Container Registry)
    
    ACR (Azure Container Registry)
    
    Self-Hosted
- References
  References
  - Customization
    Customization
    
    Environment variables
    
    Config file
  - CLI
    CLI
    
    Overview
    
    Image
    
    Config
    
    Filesystem
    
    Rootfs
    
    Repository
    
    Client
    
    Server
    
    Plugin
    
    SBOM
    
    Module
  - Modes
    Modes
    
    Standalone
    
    Client/Server
  - Troubleshooting
Ecosystem
Ecosystem
Contributing
Contributing
- How to contribute
  How to contribute
  - Issues
  - Pull Requests
- Maintainer
  Maintainer
  - Help Wanted
  - Triage

Vulnerability Scanning

Trivy scans Container Images, Rootfs, Filesystem, Virtual Machine Image and Git Repositories to detect vulnerabilities.