trivy-plugin-attest

trivy-plugin-attest Publish SBOM attestation Install $ trivy plugin install github.com/aquasecurity/trivy-plugin-attest Usage A Trivy plugin that publish SBOM attestation Usage: attest flags Examples: trivy attest --type PREDICATETYPE --predicate PREDICATEPATH BLOBPATH Publish SBOM attestation...

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

trivy

Trivy GitLab CI Component A GitLab CI component for Trivy — the all-in-one security scanner covering container images, filesystems, repositories, Kubernetes clusters, SBOMs, and license compliance. Plug these templates directly into your pipelines to get repeatable scans, GitLab-native reports, a...

trivysupplychainanalysis

Quantitative Analysis of Multi-Stage CI/CD Supply-Chain Attacks A formally verified, quantitative reconstruction of the March-2026 Trivy / "TeamPCP" GitHub Actions supply-chain compromise CVE-2026-33634 — modeled in TLA+, checked exhaustively with TLC, and quantified with the PRISM probabilistic...

hoppr-cop

Hoppr-Cop For Policing Your SBOM Vulnerabilities Hoppr Cop is a cli and python library that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials SBOM by aggregating data from multiple vulnerability databases. This project is offered as part of the hoppr...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

trivy-enforcer

trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup $ kubectl apply -f manifests/opa.ya...

trivy-repo

trivy-repo deb/rpm repository for Trivy Debian/Ubuntu $ sudo apt-get install wget apt-transport-https gnupg $ wget -qO - https://get.trivy.dev/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg /dev/null $ echo "deb signed-by=/usr/share/keyrings/trivy.gpg...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0353-1 Rating: important References: 1284829 1285541 Cross-References: CVE-2026-19585 CVE-2026-78669 CVE-2026-85091 CVSS scores: CVE-2026-19585 SUSE: 7.1...

SAFE

SAFE SAFE performs controlled, repository-aware security assessment of Semgrep and Trivy findings in research artifacts. It supports two independent classification tasks: direct binary prediction SECURITYRELEVANT or NONSECURITY and the detailed multiclass contextual taxonomy three labels — see...

trivy-plugin-kubectl

trivy-plugin-kubectl A Trivy plugin that scans the images of a kubernetes resource Install $ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl $ trivy kubectl -h Usage: trivy kubectl -h,--help TYPE NAME TRIVY OPTION A Trivy plugin that scans the images of a kubernetes resource...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.76.0-0.2.hum1 aarch64, s390x, x8664 trivy-0.76.0-0.2.hum1.src src Security Fixes: trivy: CVE-2026-111943...

trivy-module-wordpress

Trivy WoredPress Module This module provides a more in-depth investigation of Wordpress detection. Set up $ tinygo build -o wordpress.wasm -scheduler=none -target=wasi --no-debug wordpress.go $ mkdir -p /.trivy/modules $ cp wordpress.wasm /.trivy/modules It is also available in GHCR. You can...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

OPENSUSE-SU-2026:12206-1 trivy-0.76.0-1.1 on GA media

These are all security issues fixed in the trivy-0.76.0-1.1 package on the GA media of openSUSE Tumbleweed...

trivy-plugin-aqua

trivy-plugin-aqua Trivy plugin for integration with Aqua Security SaaS platform Usage Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files Set Aqua plugin as Trivy's current default plugin by exporting an environment variable export...

kube-trivy

A Simple and Comprehensive Vulnerability Scanner for Kubernetes Abstract KubeTrivy is a extends trivy for kubernetes. KubeTrivy is a simple and comprehensive vulnerability scanner for Kubernetes. KubeTrivy detects vulnerabilities of OS packages Alpine, RHEL, CentOS, etc. and application...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.75.0-0.2.hum1 aarch64, s390x, x8664 trivy-0.75.0-0.2.hum1.src src...

trivy-operator

Kit de herramientas de seguridad nativo de Kubernetes. Documentación Introducción Trivy Operator aprovecha Trivy para escanear continuamente tu clúster de Kubernetes en busca de problemas de seguridad. Los escaneos se resumen en informes de seguridad como Custom Resource Definitions de Kubernetes...