Launch offer — 40% off every tier for a limited time. Prices shown are already reduced.
Stacks / Guides / trivy
Component guide

trivy

Vulnerability scanning for images and dependencies.

AnvilRampart in Rampart-Complete-+-Onboarding-300

trivy

Licence: Apache-2.0 | Language: Go | Source: https://github.com/aquasecurity/trivy

Role

Vulnerability scanner for images and filesystems

Why it's here

Scans your container images and dependencies for known CVEs. The check most self-hosters skip and most regret.

Running it

This is a CLI tool, not a service. Build it from source or pull the official image and run it against your own systems.

./fetch-sources.sh ./sources
tar xzf ./sources/trivy.tar.gz -C ./sources
This component ships inside the Rampart stack. See pricing →