Trivy
Trivy is a comprehensive and versatile security scanner that detects security issues in a variety of targets. It can scan targets such as container images, file systems, remote go storage, virtual machine images, and Kubernetes. Known vulnerabilities find a variety of problems through browsers, such as configuration errors, confidential information, and software dependencies.
Trivy
100aquasecurity · Security & Penetration Testing
Common commercial products in this category: Burp Suite Professional, Nessus, Cobalt Strike
- You can scan container images and security holes in file systems.
- You can detect configuration errors with hidden information in git repositories and virtual machine images.
- By scanning Kubernetes environments, you can control software dependencies and security issues.
- • NeutralHacker News
Trivy ecosystem supply chain temporarily compromised
“To be clear, this is a supply chain attack on everyone that uses Trivy, not a supply chain attack on Trivy. It was a direct attack on Trivy, exploiting components that Aqua had full control and responsibility for. The term “supply chain attack” has a connotation of “ it’s not…”
- • NeutralHacker News
Trivy ecosystem supply chain temporarily compromised
“This attack seems predicated on a prior security incident ( ) at Trivy where they failed to successfully remediate and contain the damage. I think at this time, Trivy should’ve undertaken a full reassessment of risks and clearly isolated credentials and reduced risk…”
Verified against README · Oct 26, 2026 · source
My note
Alternative pages
More in: Security & Penetration Testing
- PayloadsAllTheThings★ 82,253 · today
- strix★ 72,968 · today
- Metasploit Framework★ 39,279 · today
- CyberChef★ 36,270 · yesterday
- pentagi★ 32,822 · 8 days ago
- Nuclei★ 32,483 · today