Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
☆1,406Aug 19, 2026Updated last week
Alternatives and similar repositories for trivy-action
Users that are interested in trivy-action are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆37,688Updated this week
- Kubernetes-native security toolkit☆1,932Updated this week
- A VS Code Extension for Trivy☆187Jun 29, 2026Updated 2 months ago
- Anchore container analysis and scan provided as a GitHub Action☆286Updated this week
- Tfsec is now part of Trivy☆7,035Mar 25, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to ident…☆314Updated this week
- A GitHub Action for running the ZAP Full scan☆386Aug 12, 2026Updated 2 weeks ago
- GitHub Issue + Trivy Action☆55Jan 7, 2023Updated 3 years ago
- Kubernetes controller for GitHub Actions self-hosted runners☆6,468Updated this week
- Sets up Terraform CLI in your GitHub Actions workflow.☆1,583Jul 27, 2026Updated last month
- A vulnerability scanner for container images and filesystems☆12,802Updated this week
- A set of GitHub actions for checking your projects for vulnerabilities.☆654Aug 3, 2026Updated 3 weeks ago
- A FAST Kubernetes manifests validator, with support for Custom Resources!☆3,162Jun 13, 2026Updated 2 months ago
- Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source pa…☆8,975Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆8,160Updated this week
- A Pluggable Terraform Linter☆5,798Updated this week
- Security configuration checks for popular cloud native applications and infrastructure.☆119Feb 16, 2022Updated 4 years ago
- GitHub Action to set up Docker Buildx☆1,375Updated this week
- GitHub Action to build and push Docker images with Buildx☆5,385Updated this week
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆5,211Nov 20, 2025Updated 9 months ago
- Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start☆3,292Aug 10, 2026Updated 2 weeks ago
- ☆343Aug 13, 2026Updated 2 weeks ago
- Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!☆12,496Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as K…☆6,816Updated this week
- Code signing and transparency for containers and binaries☆6,265Updated this week
- GitHub action for Hadolint, A Dockerfile linting tool☆270Updated this week
- Dockerfile linter, validate inline bash, written in Haskell☆12,379Updated this week
- A GitHub action to help you scan your docker image for vulnerabilities☆220Jan 7, 2023Updated 3 years ago
- A Kubernetes controller and tool for one-way encrypted Secrets☆9,262Updated this week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,380Jun 10, 2026Updated 2 months ago
- Static checker for GitHub Actions workflow files☆4,180Jul 16, 2026Updated last month
- GitHub Action to use Docker Buildx Bake as a high-level build command☆300Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- GitHub Action to login against a Docker registry☆1,482Updated this week
- Cosign Github Action☆209Jul 27, 2026Updated last month
- 🧵 CLI tool for directly patching container images!☆1,703Updated this week
- GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker☆1,143Updated this week
- Notice: Postee is no longer under active development or maintenance.☆205May 27, 2026Updated 3 months ago
- KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…☆3,502Updated this week
- A GitHub Action to lint and test Helm charts☆295Jul 21, 2026Updated last month