Alternatives and similar repositories for trivy:

Users that are interested in trivy are comparing it to the libraries listed below

• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆9,548Updated this week
• quay / clair
  Vulnerability Static Analysis for Containers
  ☆10,539Updated this week
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆6,725Updated this week
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,793Updated last month
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆7,712Updated this week
• future-architect / vuls
  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  ☆11,239Updated this week
• slimtoolkit / slim
  Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it …
  ☆21,280Updated this week
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,305Updated this week
• gitleaks / gitleaks
  Find secrets with Gitleaks 🔑
  ☆19,289Updated this week
• k3s-io / k3s
  Lightweight Kubernetes
  ☆29,057Updated this week
• GoogleContainerTools / distroless
  🥑 Language focused docker images, minus the operating system.
  ☆20,089Updated this week
• GoogleContainerTools / kaniko
  Build Container Images In Kubernetes
  ☆15,333Updated 3 weeks ago
• hadolint / hadolint
  Dockerfile linter, validate inline bash, written in Haskell
  ☆10,774Updated 2 weeks ago
• mikefarah / yq
  yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor
  ☆13,053Updated this week
• gravitational / teleport
  The easiest, and most secure way to access and protect all of your infrastructure.
  ☆18,186Updated this week
• open-policy-agent / opa
  Open Policy Agent (OPA) is an open source, general-purpose policy engine.
  ☆10,047Updated this week
• GoogleContainerTools / skaffold
  Easy and Repeatable Kubernetes Development
  ☆15,246Updated this week
• goodwithtech / dockle
  Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  ☆2,854Updated 2 months ago
• getsops / sops
  Simple and flexible tool for managing secrets
  ☆18,020Updated this week
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,827Updated last year
• wagoodman / dive
  A tool for exploring each layer in a docker image
  ☆49,949Updated this week
• pulumi / pulumi
  Pulumi - Infrastructure as Code in any programming language 🚀
  ☆22,679Updated this week
• moby / buildkit
  concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
  ☆8,558Updated this week
• kubernetes-sigs / kind
  Kubernetes IN Docker - local clusters for testing Kubernetes
  ☆13,942Updated this week
• firecracker-microvm / firecracker
  Secure and fast microVMs for serverless computing.
  ☆27,330Updated this week
• sigstore / cosign
  Code signing and transparency for containers and binaries
  ☆4,782Updated last week
• FiloSottile / age
  A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
  ☆18,465Updated last month
• kubernetes / kompose
  Convert Compose to Kubernetes
  ☆9,875Updated last week
• containerd / nerdctl
  contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
  ☆8,639Updated this week
• docker / docker-bench-security
  The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in productio…
  ☆9,321Updated 5 months ago