{"data":{"slug":"trivy","name":"Trivy","tagline":"","homepage":"https://trivy.dev","category":{"slug":"devsecops","name":"DevSecOps Tools"},"vendor":null,"score":{"composite":57.3,"confidence":0.41,"confidenceBand":"low","breakdown":{"capabilities":{"value":91.6,"weight":0.063,"present":true,"contribution":5.8},"repo_stars":{"value":86.4,"weight":0.026,"present":true,"contribution":2.2},"integrations":{"value":26,"weight":0.063,"present":true,"contribution":1.6},"dependent_projects":{"value":35.5,"weight":0.063,"present":true,"contribution":2.2},"dev_activity":{"value":52.9,"weight":0.094,"present":true,"contribution":5},"release_cadence":{"value":97.2,"weight":0.052,"present":true,"contribution":5.1},"security_posture":{"value":0,"weight":0.209,"present":false,"contribution":0},"package_downloads":{"value":0,"weight":0.136,"present":false,"contribution":0},"security_score":{"value":64,"weight":0.042,"present":true,"contribution":2.7},"community_qa_activity":{"value":0,"weight":0.063,"present":false,"contribution":0}},"computedAt":"2026-09-11T16:04:58.710Z","stale":false},"uri":"https://www.vioscale.ai/software/trivy","aliases":["trivy"],"status":"published","crawlStatus":"ok","indexStatus":"no_facts","nextCrawlAt":null,"categories":[{"slug":"devsecops","name":"DevSecOps Tools","isPrimary":true}],"facts":{"language":[{"attribute":"language.primary","value":"Go","provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.9}}],"license":[{"attribute":"license.spdx","value":"Apache-2.0","provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.95}}],"pricing":[{"attribute":"pricing.model","value":"open_source","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing.price_level","value":"free","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing","value":{"type":"open_source","freeTier":true,"sourceUrl":"https://trivy.dev","retrievedAt":"2026-08-14T15:30:47.970Z"},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing.free_tier","value":true,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing.transparent","value":true,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"release":[{"attribute":"release.cadence_days","value":5,"provenance":{"source":"https://github.com/aquasecurity/trivy/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.7}},{"attribute":"release.history","value":[{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.74.0","date":"2026-08-14T11:29:11Z","type":"stable","version":"v0.74.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.73.0","date":"2026-08-03T10:47:14Z","type":"stable","version":"v0.73.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.72.0","date":"2026-06-30T09:34:06Z","type":"stable","version":"v0.72.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.2","date":"2026-06-19T10:37:28Z","type":"stable","version":"v0.71.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.1","date":"2026-06-15T09:12:47Z","type":"stable","version":"v0.71.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.0","date":"2026-06-01T13:49:26Z","type":"stable","version":"v0.71.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.70.0","date":"2026-04-17T06:50:02Z","type":"stable","version":"v0.70.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.3","date":"2026-03-03T13:14:48Z","type":"stable","version":"v0.69.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.2","date":"2026-03-01T19:14:14Z","type":"stable","version":"v0.69.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.26.0","date":"2022-04-15T21:41:49Z","type":"stable","version":"v0.26.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.4","date":"2022-04-11T16:29:57Z","type":"stable","version":"v0.25.4"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.3","date":"2022-04-06T07:16:49Z","type":"stable","version":"v0.25.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.2","date":"2022-04-05T10:27:43Z","type":"stable","version":"v0.25.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.1","date":"2022-04-04T21:55:13Z","type":"stable","version":"v0.25.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.0","date":"2022-03-31T11:39:16Z","type":"stable","version":"v0.25.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.4","date":"2022-03-17T19:49:15Z","type":"stable","version":"v0.24.4"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.3","date":"2022-03-16T13:29:58Z","type":"stable","version":"v0.24.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.2","date":"2022-03-03T10:52:56Z","type":"stable","version":"v0.24.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.1","date":"2022-02-27T16:04:56Z","type":"stable","version":"v0.24.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.0","date":"2022-02-23T12:43:55Z","type":"stable","version":"v0.24.0"}],"provenance":{"source":"https://github.com/aquasecurity/trivy/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.7}}],"platform":[{"attribute":"platform.support","value":{"cli":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"activity":[{"attribute":"activity.commits_last_30d","value":47,"provenance":{"source":"https://github.com/aquasecurity/trivy/pulse","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.65}}],"adoption":[{"attribute":"adoption.github_stars","value":37872,"provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.9}},{"attribute":"adoption.dependent_repos","value":134,"provenance":{"source":"https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Faquasecurity%2Ftrivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.835Z","confidence":0.85}}],"deployment":[{"attribute":"deployment.options","value":{"self_hosted":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"description":[{"attribute":"description.long","value":"A free, open-source tool that scans code repositories, container images, binary artifacts, and Kubernetes clusters to identify vulnerabilities, misconfigurations, secrets, and license compliance issues. Designed for cloud-native environments and integrates into CI/CD pipelines.","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"features":[{"attribute":"features.capabilities","value":{"sca":true,"sast":true,"hosting":"self","ci_native":true,"open_source":true,"iac_scanning":true,"secret_scanning":true,"container_scanning":true,"license_compliance":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"integrations":[{"attribute":"integrations.count","value":7,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"integrations.list","value":[{"name":"Docker"},{"name":"GitHub"},{"name":"GitLab"},{"name":"Azure Container Registry"},{"name":"Kubernetes"},{"name":"Harbor"},{"name":"CloudNativePG"}],"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}}],"market":[{"attribute":"market.availability","value":{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.75}}],"security":[{"attribute":"security.scorecard","value":6.4,"provenance":{"source":"https://api.securityscorecards.dev/projects/github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.871Z","confidence":0.9}},{"attribute":"security.vulnerabilities","value":{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Faquasecurity%2Ftrivy&per_page=100","last_12m":4,"max_severity":"CRITICAL"},"provenance":{"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Faquasecurity%2Ftrivy&per_page=100","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.884Z","confidence":0.9}}],"content":[{"attribute":"content.faq","value":[{"answer":"A free, open-source tool that scans code repositories, container images, binary artifacts, and Kubernetes clusters to identify vulnerabilities, misconfigurations, secrets, and license compliance issues. Designed for cloud-native environments and integrates into CI/CD pipelines. It is indexed under DevSecOps Tools.","source":"https://trivy.dev","question":"What is Trivy?","confidence":0.6},{"answer":"Trivy is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trivy.dev","question":"Is Trivy free to use?","confidence":0.6},{"answer":"Trivy supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trivy.dev","question":"What platforms does Trivy support?","confidence":0.6},{"answer":"Yes. Trivy can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trivy.dev","question":"Can Trivy be self-hosted?","confidence":0.6},{"answer":"We have confirmed 7 integrations for Trivy, including Docker, GitHub, GitLab, Azure Container Registry, Kubernetes, Harbor and CloudNativePG. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trivy.dev","question":"What does Trivy integrate with?","confidence":0.6},{"answer":"Yes. Trivy is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/aquasecurity/trivy","question":"Is Trivy open source?","confidence":0.95}],"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:57.389Z","confidence":0.65833336}}]},"factList":[{"attribute":"language.primary","value":"Go","provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.9}},{"attribute":"license.spdx","value":"Apache-2.0","provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.95}},{"attribute":"pricing.model","value":"open_source","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"release.cadence_days","value":5,"provenance":{"source":"https://github.com/aquasecurity/trivy/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.7}},{"attribute":"platform.support","value":{"cli":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"activity.commits_last_30d","value":47,"provenance":{"source":"https://github.com/aquasecurity/trivy/pulse","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.65}},{"attribute":"adoption.github_stars","value":37872,"provenance":{"source":"https://github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.9}},{"attribute":"deployment.options","value":{"self_hosted":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"description.long","value":"A free, open-source tool that scans code repositories, container images, binary artifacts, and Kubernetes clusters to identify vulnerabilities, misconfigurations, secrets, and license compliance issues. Designed for cloud-native environments and integrates into CI/CD pipelines.","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"features.capabilities","value":{"sca":true,"sast":true,"hosting":"self","ci_native":true,"open_source":true,"iac_scanning":true,"secret_scanning":true,"container_scanning":true,"license_compliance":true},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"integrations.count","value":7,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing.price_level","value":"free","provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing","value":{"type":"open_source","freeTier":true,"sourceUrl":"https://trivy.dev","retrievedAt":"2026-08-14T15:30:47.970Z"},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"integrations.list","value":[{"name":"Docker"},{"name":"GitHub"},{"name":"GitLab"},{"name":"Azure Container Registry"},{"name":"Kubernetes"},{"name":"Harbor"},{"name":"CloudNativePG"}],"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"pricing.free_tier","value":true,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"market.availability","value":{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.75}},{"attribute":"pricing.transparent","value":true,"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-08-14T15:30:47.970Z","confidence":0.6}},{"attribute":"adoption.dependent_repos","value":134,"provenance":{"source":"https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Faquasecurity%2Ftrivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.835Z","confidence":0.85}},{"attribute":"release.history","value":[{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.74.0","date":"2026-08-14T11:29:11Z","type":"stable","version":"v0.74.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.73.0","date":"2026-08-03T10:47:14Z","type":"stable","version":"v0.73.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.72.0","date":"2026-06-30T09:34:06Z","type":"stable","version":"v0.72.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.2","date":"2026-06-19T10:37:28Z","type":"stable","version":"v0.71.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.1","date":"2026-06-15T09:12:47Z","type":"stable","version":"v0.71.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.0","date":"2026-06-01T13:49:26Z","type":"stable","version":"v0.71.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.70.0","date":"2026-04-17T06:50:02Z","type":"stable","version":"v0.70.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.3","date":"2026-03-03T13:14:48Z","type":"stable","version":"v0.69.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.2","date":"2026-03-01T19:14:14Z","type":"stable","version":"v0.69.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.26.0","date":"2022-04-15T21:41:49Z","type":"stable","version":"v0.26.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.4","date":"2022-04-11T16:29:57Z","type":"stable","version":"v0.25.4"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.3","date":"2022-04-06T07:16:49Z","type":"stable","version":"v0.25.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.2","date":"2022-04-05T10:27:43Z","type":"stable","version":"v0.25.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.1","date":"2022-04-04T21:55:13Z","type":"stable","version":"v0.25.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.0","date":"2022-03-31T11:39:16Z","type":"stable","version":"v0.25.0"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.4","date":"2022-03-17T19:49:15Z","type":"stable","version":"v0.24.4"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.3","date":"2022-03-16T13:29:58Z","type":"stable","version":"v0.24.3"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.2","date":"2022-03-03T10:52:56Z","type":"stable","version":"v0.24.2"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.1","date":"2022-02-27T16:04:56Z","type":"stable","version":"v0.24.1"},{"url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.0","date":"2022-02-23T12:43:55Z","type":"stable","version":"v0.24.0"}],"provenance":{"source":"https://github.com/aquasecurity/trivy/releases","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.794Z","confidence":0.7}},{"attribute":"security.scorecard","value":6.4,"provenance":{"source":"https://api.securityscorecards.dev/projects/github.com/aquasecurity/trivy","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.871Z","confidence":0.9}},{"attribute":"security.vulnerabilities","value":{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Faquasecurity%2Ftrivy&per_page=100","last_12m":4,"max_severity":"CRITICAL"},"provenance":{"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Faquasecurity%2Ftrivy&per_page=100","sourceType":"vioscale-crawler","retrievedAt":"2026-09-11T15:57:57.884Z","confidence":0.9}},{"attribute":"content.faq","value":[{"answer":"A free, open-source tool that scans code repositories, container images, binary artifacts, and Kubernetes clusters to identify vulnerabilities, misconfigurations, secrets, and license compliance issues. Designed for cloud-native environments and integrates into CI/CD pipelines. It is indexed under DevSecOps Tools.","source":"https://trivy.dev","question":"What is Trivy?","confidence":0.6},{"answer":"Trivy is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trivy.dev","question":"Is Trivy free to use?","confidence":0.6},{"answer":"Trivy supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trivy.dev","question":"What platforms does Trivy support?","confidence":0.6},{"answer":"Yes. Trivy can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trivy.dev","question":"Can Trivy be self-hosted?","confidence":0.6},{"answer":"We have confirmed 7 integrations for Trivy, including Docker, GitHub, GitLab, Azure Container Registry, Kubernetes, Harbor and CloudNativePG. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trivy.dev","question":"What does Trivy integrate with?","confidence":0.6},{"answer":"Yes. Trivy is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/aquasecurity/trivy","question":"Is Trivy open source?","confidence":0.95}],"provenance":{"source":"https://trivy.dev","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:57.389Z","confidence":0.65833336}}],"faq":[{"answer":"A free, open-source tool that scans code repositories, container images, binary artifacts, and Kubernetes clusters to identify vulnerabilities, misconfigurations, secrets, and license compliance issues. Designed for cloud-native environments and integrates into CI/CD pipelines. It is indexed under DevSecOps Tools.","source":"https://trivy.dev","question":"What is Trivy?","confidence":0.6},{"answer":"Trivy is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://trivy.dev","question":"Is Trivy free to use?","confidence":0.6},{"answer":"Trivy supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://trivy.dev","question":"What platforms does Trivy support?","confidence":0.6},{"answer":"Yes. Trivy can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://trivy.dev","question":"Can Trivy be self-hosted?","confidence":0.6},{"answer":"We have confirmed 7 integrations for Trivy, including Docker, GitHub, GitLab, Azure Container Registry, Kubernetes, Harbor and CloudNativePG. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://trivy.dev","question":"What does Trivy integrate with?","confidence":0.6},{"answer":"Yes. Trivy is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/aquasecurity/trivy","question":"Is Trivy open source?","confidence":0.95}],"faqSource":"generated","market":{"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[],"primaryMarkets":[]},"releaseHistory":[{"version":"v0.74.0","date":"2026-08-14T11:29:11Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.74.0","type":"stable"},{"version":"v0.73.0","date":"2026-08-03T10:47:14Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.73.0","type":"stable"},{"version":"v0.72.0","date":"2026-06-30T09:34:06Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.72.0","type":"stable"},{"version":"v0.71.2","date":"2026-06-19T10:37:28Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.2","type":"stable"},{"version":"v0.71.1","date":"2026-06-15T09:12:47Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.1","type":"stable"},{"version":"v0.71.0","date":"2026-06-01T13:49:26Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.71.0","type":"stable"},{"version":"v0.70.0","date":"2026-04-17T06:50:02Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.70.0","type":"stable"},{"version":"v0.69.3","date":"2026-03-03T13:14:48Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.3","type":"stable"},{"version":"v0.69.2","date":"2026-03-01T19:14:14Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.69.2","type":"stable"},{"version":"v0.26.0","date":"2022-04-15T21:41:49Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.26.0","type":"stable"},{"version":"v0.25.4","date":"2022-04-11T16:29:57Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.4","type":"stable"},{"version":"v0.25.3","date":"2022-04-06T07:16:49Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.3","type":"stable"},{"version":"v0.25.2","date":"2022-04-05T10:27:43Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.2","type":"stable"},{"version":"v0.25.1","date":"2022-04-04T21:55:13Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.1","type":"stable"},{"version":"v0.25.0","date":"2022-03-31T11:39:16Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.25.0","type":"stable"},{"version":"v0.24.4","date":"2022-03-17T19:49:15Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.4","type":"stable"},{"version":"v0.24.3","date":"2022-03-16T13:29:58Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.3","type":"stable"},{"version":"v0.24.2","date":"2022-03-03T10:52:56Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.2","type":"stable"},{"version":"v0.24.1","date":"2022-02-27T16:04:56Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.1","type":"stable"},{"version":"v0.24.0","date":"2022-02-23T12:43:55Z","url":"https://github.com/aquasecurity/trivy/releases/tag/v0.24.0","type":"stable"}],"integrations":[{"name":"Docker"},{"name":"GitHub"},{"name":"GitLab"},{"name":"Azure Container Registry"},{"name":"Kubernetes"},{"name":"Harbor"},{"name":"CloudNativePG"}],"vulnerabilities":{"count":5,"last12m":4,"maxSeverity":"CRITICAL","source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Faquasecurity%2Ftrivy&per_page=100"},"claimed":false,"updatedAt":"2026-09-11T16:17:58.986Z","formats":{"json":"https://www.vioscale.ai/api/v1/software/trivy","markdown":"https://www.vioscale.ai/software/trivy.md","html":"https://www.vioscale.ai/software/trivy"}},"meta":{"source":"https://www.vioscale.ai","license":"CC-BY-4.0","generatedAt":"2026-09-21T01:30:34.903Z","disclaimer":"Independent, evidence-based. Every fact carries provenance."}}