Command-line tool

trivy

brew/trivy

Checked 25 Oct 2026, 21:09 UTC · Listing refreshed from Homebrew, winget, npm, Scoop and cargo; npm packages checked against OSV.dev

Vulnerability scanner for container images, file systems, and Git repos docker security cli golang containers infrastructure-as-code vulnerability sbom devops-tools kubernetes security-tools vulnerability-detector

Website Source

At a glance

Type

Command-line tool

Install on

Windows, macOS, Linux

Last checked

25 Oct 2026, 21:09 UTC

Install it

Windows

winget install --id AquaSecurity.Trivy -e
scoop install trivy

macOS

brew install trivy

Linux

brew install trivy

Scan a Docker image for vulnerabilities and exposed secrets

trivy image image:tag

Scan a Docker image filtering the output by severity

trivy image -s HIGH,CRITICAL alpine:3.15

Scan a Docker image ignoring any unfixed/unpatched vulnerabilities

trivy image --ignore-unfixed alpine:3.15

Browse

• Docker and Kubernetes

Related command-line tools

• vuls
  Agentless Vulnerability Scanner for Linux/FreeBSD
• grype
  Vulnerability scanner for container images and filesystems docker go security tool hacktoberfest golang oci containers…
• osv-scanner
  Vulnerability scanner which uses the OSV database scanner security-tools vulnerability-scanner security-audit
• copa
  Tool to directly patch container images given the vulnerability scanning results
• vet
  Policy driven vetting of open source dependencies
• crane
  Tool for interacting with remote images and registries
• incus
  CLI client for interacting with Incus cloud hacktoberfest containers virtual-machines
• clair
  Vulnerability Static Analysis for Containers

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents