Upstream software project

trivy

A Simple and Comprehensive Vulnerability Scanner for Containers

About trivy

A Simple and Comprehensive Vulnerability Scanner for Containers

This project links 5 native package records across 5 recorded operating-system releases. Compare the retained versions and architectures below, then open the package for your own release.

These are catalog observations, not a guarantee of installation, compatibility, or upstream support.

Visit project website

Project pictures and package coverage

trivy repository preview from GitHub
Project repository preview, supplied by GitHub. Open source repository
Fedora 43: 1 package records; Fedora 44: 1 package records; openSUSE Leap 15.6: 1 package records; openSUSE Leap 16.0: 1 package records; openSUSE Tumbleweed: 1 package records. Catalog coverage diagram, not an application screenshot.trivy: recorded package coverageFedora 431 recordsFedora 441 recordsopenSUSE Leap 15.61 recordsopenSUSE Leap 16.01 recordsopenSUSE Tumbleweed1 records
OpenFactory diagram of linked package records. It is not an application screenshot.

Project identity

Project
trivy
Publisher
Not authoritatively mapped
Native package records
5
Operating systems
fedora-43, fedora-44, opensuse-leap-15-6, opensuse-leap-16-0, opensuse-tumbleweed
License expression
Apache-2.0
Homepage
Visit upstream site
Source repository
Open source repository

Source-reported description

The fullest retained description is shown with its source. Distribution packaging descriptions may include downstream details.

Trivy (`tri` pronounced like trigger, `vy` pronounced like envy) is a simple and comprehensive vulnerability scanner for containers and other artifacts. A software vulnerability is a glitch, flaw, or weakness present in the software or in an Operating System. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Trivy is easy to use. Just install the binary and you're ready to scan. All you need to do for scanning is to specify a target such as an image name of the container.

Description source

Packages by operating system

Compare recorded versions, then open a package for dependency, file, checksum, and repository evidence. Version strings are distribution-specific, not a ranking of newer software.

Fedora 43

  1. Package trivy

    43 (Fedora 43) (Unspecified): Vulnerability and license scanner

    0.69.3-1.fc43: aarch64 x86_64

    Source: trivy

Fedora 44

  1. Package trivy

    44 (Fedora 44) (Unspecified): Vulnerability and license scanner

    0.69.3-1.fc44: aarch64 x86_64

    Source: trivy

openSUSE Leap 15.6

  1. Package trivy

    leap-15.6 (openSUSE Leap 15.6) (System/Management): A Simple and Comprehensive Vulnerability Scanner for Containers

    0.44.1-bp156.1.36: aarch64 ppc64le s390x x86_64

    Source: trivy

openSUSE Leap 16.0

  1. Package trivy

    leap-16.0 (openSUSE Leap 16.0) (System/Management): A Simple and Comprehensive Vulnerability Scanner for Containers

    0.71.0-160000.1.1: aarch64 ppc64le s390x x86_64

    Source: trivy

openSUSE Tumbleweed

  1. Package trivy

    tumbleweed (openSUSE Tumbleweed) (System/Management): A Simple and Comprehensive Vulnerability Scanner for Containers

    0.74.0-1.1: x86_64

    Source: trivy

Project resources and further reading

Mapping provenance

Only source-backed identity signals create public cross-OS links. A reviewer can later approve or dispute an inferred relationship without rewriting native package history.

No field-level source record is published yet.