{"slug":"trivy","name":"trivy","category":"security","categoryName":"Identity, secrets & agent security","audience":["for-ai"],"primary":"for-ai","openClosed":"open","pricing":"open-source","license":"Apache-2.0","maintained":"yes","officialUrl":"https://trivy.dev","repo":"https://github.com/aquasecurity/trivy","latestVersion":"v0.75.0","latestRelease":"2026-10-01","stars":38246,"starsAsOf":"2026-10-05","description":"Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more","descriptionZh":"漏洞与配置扫描","callMethods":["CLI"],"platforms":[],"addedAt":"2026-10-10","updatedAt":"2026-10-05","topics":["containers","devsecops","docker","go","golang","hacktoberfest","iac","infrastructure-as-code"],"language":"Go","lastPush":"2026-10-02","formerly":null,"packages":[{"registry":"go","name":"github.com/aQUASEcurity/trIVY","url":"https://pkg.go.dev/github.com/aquasecurity/trivy","versionsUrl":"https://pkg.go.dev/github.com/aquasecurity/trivy?tab=versions","latestVersion":"v0.75.0","latestDate":"2026-10-01"}],"recentVersions":[{"version":"v0.75.0","date":"2026-10-01","prerelease":false,"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.75.0","source":"GitHub Release"},{"version":"v0.74.0","date":"2026-08-14","prerelease":false,"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.74.0","source":"GitHub Release"},{"version":"v0.73.0","date":"2026-08-03","prerelease":false,"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.73.0","source":"GitHub Release"},{"version":"v0.72.0","date":"2026-06-30","prerelease":false,"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.72.0","source":"GitHub Release"},{"version":"v0.71.2","date":"2026-06-19","prerelease":false,"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.2","source":"GitHub Release"}],"alternatives":["grype","syft","infisical","vault","gitleaks","trufflehog","semgrep","openbao"],"stacks":[],"scenarios":["safe-agent-execution"],"problems":["verify-mcp-server-supply-chain","litellm-1-107-0-supply-chain-compromise"],"reasonZh":"依赖漏洞扫描；实测认证流程用","sources":["profile","priority","oss"],"record":"https://aimap.page/api/v1/software/trivy.json","pages":{"en":"https://aimap.page/en/software/trivy/","zh-hans":"https://aimap.page/zh-hans/software/trivy/"}}