Tools
trivy
aquasecurity/trivy
A comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
Topics
Related projects
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
slim23.5kA container optimization toolkit that inspects application behavior to minify images by up to 30x and generate tighter security profiles.
vuls12.3kAn agent-less vulnerability scanner for Linux, FreeBSD, containers and more, automatically detecting and reporting security vulnerabilities.
vulscan3.8kVulscan is an Nmap NSE module that turns version detection into vulnerability identification by matching services against bundled offline vulnerability databases.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.