{
 "schema_version": 1,
 "generated": "2026-10-31",
 "repo": "aquasecurity/trivy",
 "name": "trivy",
 "owner": "aquasecurity",
 "slug": "aquasecurity-trivy",
 "github": "https://github.com/aquasecurity/trivy",
 "what": "Trivy is Aqua Security's open source security scanner. It scans container images, filesystems, remote git repositories, virtual machine images and Kubernetes clusters for known vulnerabilities (CVEs), software dependencies (SBOM), infrastructure as code misconfigurations, secrets and software licenses. It installs through Homebrew, Docker or a binary and integrates with GitHub Actions, a Kubernetes operator and VS Code.",
 "why": "39k stars, talked about in 2 AI sources we track",
 "language": "Go",
 "requirements": [
  "Trivy via `brew install trivy`, the aquasec/trivy Docker image, or a release binary",
  "Access to the image, folder, repo or Kubernetes cluster you want to scan"
 ],
 "audience_note": "Developers, DevOps and platform teams who want to find vulnerable packages and misconfigurations before they ship.",
 "risk": "none",
 "section": "earlier",
 "weekly_rank": null,
 "category": "Security and science",
 "url": "https://dedupedai.com/use-cases/aquasecurity-trivy/",
 "use_case_count": 3,
 "use_cases": [
  {
   "id": "aquasecurity-trivy--scan-a-container-image-for-cves",
   "title": "Scan a container image for known vulnerabilities",
   "best": true,
   "url": "https://dedupedai.com/use-cases/aquasecurity-trivy/scan-a-container-image-for-cves/",
   "json": "https://dedupedai.com/use-cases/u/aquasecurity-trivy/scan-a-container-image-for-cves.json"
  },
  {
   "id": "aquasecurity-trivy--scan-a-project-for-vulns-secrets-and-misconfigs",
   "title": "Check a project folder for vulnerabilities, secrets and misconfigurations",
   "best": false,
   "url": "https://dedupedai.com/use-cases/aquasecurity-trivy/scan-a-project-for-vulns-secrets-and-misconfigs/",
   "json": "https://dedupedai.com/use-cases/u/aquasecurity-trivy/scan-a-project-for-vulns-secrets-and-misconfigs.json"
  },
  {
   "id": "aquasecurity-trivy--get-a-security-summary-of-a-kubernetes-cluster",
   "title": "Get a security summary of a Kubernetes cluster",
   "best": false,
   "url": "https://dedupedai.com/use-cases/aquasecurity-trivy/get-a-security-summary-of-a-kubernetes-cluster/",
   "json": "https://dedupedai.com/use-cases/u/aquasecurity-trivy/get-a-security-summary-of-a-kubernetes-cluster.json"
  }
 ],
 "disclaimer": "Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk."
}