Alternatives and similar repositories for trivy

Users that are interested in trivy are comparing it to the libraries listed below

• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆10,915Updated this week
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆7,877Updated this week
• quay / clair
  Vulnerability Static Analysis for Containers
  ☆10,839Updated this week
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,913Updated 3 weeks ago
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆8,356Updated this week
• kubeshark / kubeshark
  The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and paylo…
  ☆11,540Updated this week
• docker / docker-bench-security
  The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in productio…
  ☆9,512Updated last year
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,783Updated this week
• gravitational / teleport
  The easiest, and most secure way to access and protect all of your infrastructure.
  ☆19,321Updated this week
• slimtoolkit / slim
  Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it …
  ☆22,443Updated this week
• open-policy-agent / opa
  Open Policy Agent (OPA) is an open source, general-purpose policy engine.
  ☆10,802Updated this week
• containers / skopeo
  Work with remote images registries - retrieving information, images, signing content
  ☆9,960Updated this week
• firecracker-microvm / firecracker
  Secure and fast microVMs for serverless computing.
  ☆30,939Updated this week
• getsops / sops
  Simple and flexible tool for managing secrets
  ☆19,874Updated this week
• moby / buildkit
  concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
  ☆9,477Updated this week
• sigstore / cosign
  Code signing and transparency for containers and binaries
  ☆5,375Updated this week
• kubescape / kubescape
  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…
  ☆11,037Updated 2 weeks ago
• semgrep / semgrep
  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  ☆13,233Updated this week
• google / osv-scanner
  Vulnerability scanner written in Go which uses the data provided by https://osv.dev
  ☆7,965Updated this week
• traefik / traefik
  The Cloud Native Application Proxy
  ☆57,493Updated this week
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,957Updated last year
• gitleaks / gitleaks
  Find secrets with Gitleaks 🔑
  ☆23,779Updated last week
• grafana / k6
  A modern load testing tool, using Go and JavaScript
  ☆29,082Updated this week
• GoogleContainerTools / distroless
  🥑 Language focused docker images, minus the operating system.
  ☆21,559Updated this week
• hadolint / hadolint
  Dockerfile linter, validate inline bash, written in Haskell
  ☆11,624Updated last week
• dagger / dagger
  An open-source runtime for composable workflows. Great for AI agents and CI/CD.
  ☆14,926Updated this week
• aquasecurity / tracee
  Linux Runtime Security and Forensics using eBPF
  ☆4,227Updated this week
• goodwithtech / dockle
  Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  ☆3,078Updated 9 months ago
• GoogleContainerTools / kaniko
  Build Container Images In Kubernetes
  ☆15,703Updated 5 months ago
• wagoodman / dive
  A tool for exploring each layer in a docker image
  ☆52,498Updated last week