The Trivy homepage
Score6.5
Rank#19 of 64
Free planNo
Runs onLinux, macOS, Self-hosted, Windows

Summary

Trivy is ranked #19 of 64 in software composition analysis software on Everything Xiaomi. It runs on Linux, macOS, Self-hosted, Windows.

Compared on software composition analysis software

Free plan
Yestrivy.dev

Facts

Purpose
Trivy scans code repositories, binary artifacts, container images, and Kubernetes clusters for vulnerabilities and misconfigurations.trivy.dev · 4 Oct 2026
License
The Trivy homepage identifies the project as Go software under the Apache-2.0 License.trivy.dev · 4 Oct 2026
Vulnerability scanning
Trivy detects known vulnerabilities in OS packages, language-specific packages, non-packaged software, and Kubernetes components.trivy.dev · 4 Oct 2026
Secrets scanning
Trivy includes a secret scanner.trivy.dev · 4 Oct 2026
IaC scanning
Trivy provides infrastructure-as-code misconfiguration scanning.aquasec.com · 4 Oct 2026
SBOM
Trivy supports generating software bills of materials (SBOMs).trivy.dev · 4 Oct 2026
Install options
Official installation options include container images, GitHub release binaries, package repositories, Homebrew, and Windows downloads.trivy.dev · 4 Oct 2026
CI integrations
The docs list official Azure DevOps and GitHub Actions integrations, alongside community integrations for other CI systems.trivy.dev · 4 Oct 2026
IDE integrations
The ecosystem docs list a VS Code plugin among Trivy integrations.trivy.dev · 4 Oct 2026
Deployment
Aqua says Trivy can be installed as a binary for CI/CD and does not require middleware or database dependencies.aquasec.com · 4 Oct 2026
Air-gapped use
Aqua says Trivy can run in air-gapped environments.aquasec.com · 4 Oct 2026
Output formats
Aqua says Trivy can export results in formats including JUnit XML, SARIF, and AWS Security Finding Format (ASFF).aquasec.com · 4 Oct 2026
Coverage limit
The vulnerability scanner documentation says Trivy does not support third-party or self-compiled packages and binaries.trivy.dev · 4 Oct 2026
Company
Aqua Security says it was founded in 2015 and is headquartered in Boston and Ramat Gan, Israel.aquasec.com · 4 Oct 2026

Company

Founded
2015trivy.dev · 28 Sept 2026
Headquarters
Boston, Massachusetts, and Ramat Gan, Israeltrivy.dev · 28 Sept 2026

Best Trivy alternatives

See all 12

Where it ranks on Everything Xiaomi

Is Trivy yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources