Repoworthy
A tool for detecting secrets like passwords, API keys, and tokens.
Trivy
aquasecurity/trivy
A security scanner for vulnerabilities, misconfigurations, secrets, and SBOM.
- Active
- Apache-2.0
- Go
39.2kGitHub stars
851Forks
441Contributors
v0.76.2latest release
In short
Trivy is a GitHub project in the Security category, written mainly in Go. It is released under the Apache-2.0 licence (permissive). Maintenance status: active, last commit 11 Nov 2026. It has 39,230 GitHub stars.
What it does
Standout capabilityScans container images, filesystems, Git repositories, VM images, and Kubernetes
Best forDevelopers and security teams scanning containers and code
Maintenance
0 dsince last commit
6 dsince last release
317open issues
7 yrproject age
commitrelease
12 months agotoday
Active Commits in the last 30 days. Last commit: 11 Nov 2026 · Latest release: v0.76.2 · 5 Nov 2026. How we score this
Licence in plain words
Permissive · Apache-2.0
Use, modify and sell it, including in closed-source products. Keep notices, state your changes, and you get an explicit patent grant.
A summary, not legal advice. Read the project's LICENSE file before relying on it. SPDX ↗
Trivy compared with alternatives
| Project | Stars | Licence | Status | Last commit |
|---|---|---|---|---|
| Vaultwarden | 70.6k | AGPL-3.0 | Active | 4 Nov 2026 |
| Trivy (this page) | 39.2k | Apache-2.0 | Active | 11 Nov 2026 |
| Web-Check | 35.5k | MIT | Active | 5 Nov 2026 |
| Gitleaks | 30.9k | MIT | Active | 28 Oct 2026 |
| MyPII | — | MIT | Active | 6 Nov 2026 |
Same category, sorted by GitHub stars. Numbers checked 11 Nov 2026.
Questions
Is Trivy free and open source?
Yes. Trivy is published on GitHub under the Apache-2.0 licence (permissive). Use, modify and sell it, including in closed-source products. Keep notices, state your changes, and you get an explicit patent grant.
Is Trivy still maintained?
Active: the last commit was on 11 Nov 2026 and the latest release, v0.76.2, came out on 5 Nov 2026. Repoworthy rechecks this daily.
What is Trivy written in?
Trivy is mainly written in Go.
How popular is Trivy?
As of 11 Nov 2026, Trivy has 39,230 GitHub stars, 851 forks and 441 contributors.
What are some alternatives to Trivy?
Other Security projects on Repoworthy include Gitleaks, Web-Check, Vaultwarden and MyPII.
Alternatives in Security
Security →
An all-in-one OSINT tool for analysing any website.
An alternative server implementation of the Bitwarden Client API, written in Rust.
A set of Malaysian PII recognizers for Presidio.
Numbers from the GitHub API, checked 11 Nov 2026. Text summarised from the project's README. Spotted something wrong? Tell us.