Trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Public signal read
?
How to read this
These bars are a reader-facing view of the ToolVitals evidence model. They summarize maintenance, shipping, confidence, and decay signals.
- Activity
- Recent commits, releases, changelog, package, and product-motion signals.
- Reliability
- Maintenance posture from recency, release evidence, availability, and repo signals.
- Adoption
- Public footprint from GitHub stars, forks, and watchers when available.
- Sustainability
- Longer-term posture combining health, activity, adoption, confidence, and decay risk.
Score History
Scores collected daily. More data points appear as the tracker runs.
What ToolVitals knows about Trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
This tool has an OSI-approved open-source license signal.
Maintenance and shipping signals are strong.
GitHub Activity
- Primary Language
- Go
- Last Commit
- Today
- Releases 90d
- 4
- Default Branch
- main
- License
- Apache-2.0
- Repository Status
- Active repository
Signal Quality
ConfidenceHigh-confidence score from multiple public signals.
Zombie RiskNo meaningful zombie signal right now.
License Evidence
- Class
- OSI-approved OSS
- License
- Apache-2.0
This tool has an OSI-approved open-source license signal.
Tracked Sources
Classification
- Category
- Security
- Use Case
- Security Scanning
- Openness
- OSI-approved OSS
- License
- Apache-2.0
- Tool Mode
- Source-visible project
- Score Model
- Open Source Maintenance
- Score Visibility
- Scored Intelligence
- Status
- Active
README Badge
Show this ToolVitals status in project docs.
Open badge SVGRecent Updates
Next decisions
Useful paths from this profile
Get the direct dead/alive verdict from ToolVitals health, shipping, confidence, and decay signals.
AlternativesAlternatives to TrivySee healthier security scanning options ranked by ToolVitals evidence.
CompareTrivy vs ProwlerCompare health, shipping, openness, and evidence mode side by side.
LeaderboardSecurity Scanning rankingsBrowse every tracked tool in this use case and see the wider ranking context.
Recommended Alternatives
Top-ranked tools in the same use case by public ToolVitals evidence.
DefectDojo
Active · OSI-approved OSS
Snyk
Active · OSI-approved OSS
Kubescape
Active · OSI-approved OSS
Some links are affiliate links. ToolVitals may earn a commission from qualifying purchases.