Alternatives and similar repositories for trivy:

Users that are interested in trivy are comparing it to the libraries listed below

• quay / clair
  Vulnerability Static Analysis for Containers
  ☆10,397Updated this week
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,729Updated 2 months ago
• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆8,940Updated this week
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆7,450Updated this week
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆6,346Updated this week
• getsops / sops
  Simple and flexible tool for managing secrets
  ☆17,158Updated this week
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,114Updated this week
• GoogleContainerTools / kaniko
  Build Container Images In Kubernetes
  ☆14,966Updated last week
• slimtoolkit / slim
  Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it …
  ☆19,951Updated this week
• containers / skopeo
  Work with remote images registries - retrieving information, images, signing content
  ☆8,395Updated this week
• gravitational / teleport
  The easiest, and most secure way to access and protect all of your infrastructure.
  ☆17,712Updated this week
• GoogleContainerTools / distroless
  🥑 Language focused docker images, minus the operating system.
  ☆19,274Updated this week
• gitleaks / gitleaks
  Protect and discover secrets using Gitleaks 🔑
  ☆18,101Updated this week
• hadolint / hadolint
  Dockerfile linter, validate inline bash, written in Haskell
  ☆10,513Updated last month
• sigstore / cosign
  Code signing and transparency for containers and binaries
  ☆4,554Updated last week
• gruntwork-io / terratest
  Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.
  ☆7,544Updated this week
• infracost / infracost
  Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!
  ☆11,096Updated this week
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,771Updated 8 months ago
• docker / docker-bench-security
  The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in productio…
  ☆9,190Updated last month
• containerd / nerdctl
  contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
  ☆8,253Updated this week
• kubernetes / kompose
  Convert Compose to Kubernetes
  ☆9,672Updated this week
• kubeshark / kubeshark
  The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and paylo…
  ☆11,094Updated this week
• GoogleContainerTools / skaffold
  Easy and Repeatable Kubernetes Development
  ☆15,084Updated this week
• pulumi / pulumi
  Pulumi - Infrastructure as Code in any programming language 🚀
  ☆21,972Updated this week
• moby / buildkit
  concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
  ☆8,298Updated this week
• goss-org / goss
  Quick and Easy server testing/validation
  ☆5,629Updated 2 weeks ago
• open-policy-agent / opa
  Open Policy Agent (OPA) is an open source, general-purpose policy engine.
  ☆9,771Updated this week
• runatlantis / atlantis
  Terraform Pull Request Automation
  ☆7,882Updated this week
• firecracker-microvm / firecracker
  Secure and fast microVMs for serverless computing.
  ☆26,408Updated this week