GHOSTby AlphaBravo
CatalogWhy GhostContactAccount
Ghost Container Registry — Secure, signed, FIPS-ready images·Built by AlphaBravo
Catalog/trivy

trivy

FIPS 140-3Security

Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

OverviewGuidesTags
Signed
SBOM
FIPS
CIS

Pull this image

About

About Trivy

Trivy is a comprehensive and versatile security scanner for containerized applications and infrastructure. It provides multiple scanners that detect vulnerabilities, misconfigurations, secrets, and SBOM (Software Bill of Materials) across various targets including container images, filesystems, Git repositories, Kubernetes clusters, and cloud infrastructure.

Trivy excels at finding security issues in:

  • Container images: Scans OS packages and application dependencies for known vulnerabilities
  • Infrastructure as Code (IaC): Detects misconfigurations in Terraform, CloudFormation, Kubernetes manifests, and more
  • Secrets: Identifies hardcoded secrets, API keys, and credentials in code and configuration files
  • Kubernetes: Scans clusters for security issues and compliance violations
  • SBOM: Generates and analyzes Software Bills of Materials
  • License compliance: Checks for license violations in dependencies

Key features include:

  • Fast and accurate vulnerability scanning with multiple vulnerability databases
  • Support for multiple languages and frameworks (Go, Node.js, Python, Java, .NET, etc.)
  • Built-in policies for security best practices and compliance standards
  • Integration with CI/CD pipelines and security tools
  • Detailed reporting in multiple formats (JSON, SARIF, table, etc.)

For more details, visit https://aquasecurity.github.io/trivy/.

Recently pushed

View all →
0.74.0-distroless-e511d6dcffb0FIPSDistroless
4 CVEs98 MBAug 24
0.74.0-distroless-6e85124fb527FIPSDistroless
0 CVEs98 MBAug 24
0.73.0-distroless-ab8762588113FIPSDistroless

Image details

Distribution
Alpine
Architecture
amd64
Latest size
43 MB
Variants
Base + FIPS
Last pushed
Aug 12, 2026
Last scanned
Aug 12, 2026 · Trivy

Resources

Documentation ↗
Available tags
7 tags
View tags →
Latest digest
sha256:6fb230b74587…
0 CVEs97 MBAug 14
0.72.0-distroless-541e56f6c670FIPSDistroless
4 CVEs98 MBAug 13
0.73.0-distroless-87e20a27db6dFIPSDistroless
0 CVEs97 MBAug 13