Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Omnigraph
Omnigraph
Busbar
Busbar
Websitebench
Websitebench
Bifrost
Bifrost

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Visit GitHub
Go
39.4k
960
537 contributors
Apache License 2.0
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Omnigraph

Versioned graph database on object storage. Git-style workflows and multimodal retrieval

Busbar

Control what AI can do before it acts

Websitebench

Can AI agents reverse-engineer real websites?

Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast aquasecurity/trivy is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 16 – Nov 15, 2026

Stars +1,439 in 61 days

0204060
50

Forks +215 in 61 days

051015
12

Merged PRs 127 in 61 days

0510
10

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 16Sep 24Oct 2Oct 10Oct 18Oct 26Nov 3Nov 11
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Wed, Sep 16, 2026+20+21
Thu, Sep 17, 2026+16+22
Fri, Sep 18, 2026+11+51
Sat, Sep 19, 2026+8+10
Sun, Sep 20, 2026+9+40
Mon, Sep 21, 2026+7+67
Tue, Sep 22, 2026+15+23
Wed, Sep 23, 2026+33+32
Thu, Sep 24, 2026+16+20
Fri, Sep 25, 2026+12+06
Sat, Sep 26, 2026+9+30
Sun, Sep 27, 2026+14+10
Mon, Sep 28, 2026+14+24
Tue, Sep 29, 2026+25+55
Wed, Sep 30, 2026+18+34
Thu, Oct 1, 2026+22+15
Fri, Oct 2, 2026+21+21
Sat, Oct 3, 2026+11+00
Sun, Oct 4, 2026+13+20
Mon, Oct 5, 2026+23+50
Tue, Oct 6, 2026+26+81
Wed, Oct 7, 2026+14+61
Thu, Oct 8, 2026+11+30
Fri, Oct 9, 2026+16+32
Sat, Oct 10, 2026+24+50
Sun, Oct 11, 2026+20+20
Mon, Oct 12, 2026+19+410
Tue, Oct 13, 2026+20+32
Wed, Oct 14, 2026+27+25
Thu, Oct 15, 2026+21+14
Fri, Oct 16, 2026+20+24
Sat, Oct 17, 2026+18+50
Sun, Oct 18, 2026+17+40
Mon, Oct 19, 2026+22+32
Tue, Oct 20, 2026+28+12
Wed, Oct 21, 2026+30+79
Thu, Oct 22, 2026+50+91
Fri, Oct 23, 2026+44+23
Sat, Oct 24, 2026+20+40
Sun, Oct 25, 2026+21+10
Mon, Oct 26, 2026+30+52
Tue, Oct 27, 2026+38+42
Wed, Oct 28, 2026+34+24
Thu, Oct 29, 2026+22+31
Fri, Oct 30, 2026+28+12
Sat, Oct 31, 2026+15+10
Sun, Nov 1, 2026+17+30
Mon, Nov 2, 2026+20+42
Tue, Nov 3, 2026+26+12
Wed, Nov 4, 2026+43+31
Thu, Nov 5, 2026+49+77
Fri, Nov 6, 2026+38+71
Sat, Nov 7, 2026+28+10
Sun, Nov 8, 2026+29+40
Mon, Nov 9, 2026+41+52
Tue, Nov 10, 2026+39+61
Wed, Nov 11, 2026+30+54
Thu, Nov 12, 2026+37+61
Fri, Nov 13, 2026+36+128
Sat, Nov 14, 2026+31+90
Sun, Nov 15, 2026+23+00
Total+1,439+215127
  • 1#1 on the list
  • 7Rank that day
  • Not trending
1

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    Apr 25, 2025 – Jun 6, 2026Best #2

    #1#5#10#15#20#25
    Top 10
    Oct 2023AprOctAprOctAprOct
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about aquasecurity/trivy, and every badge it has earned
    1. Nov 121 post

      • You shipped the image. Then someone asks whether it has a critical CVE — and the answer is a shrug. Trivy scans container images, filesystems, and Kubernetes for vulns, misconfig, secrets, and SBOMs.…

        Read full on X, posted by @wushi123321

        @wushi123321 · x.com

    2. Nov 92 posts

      • 5 outils pour ne pas te faire backdoorer par un npm install : 1. SafeDep vet 2. Socket CLI 3. Trivy 4. OSV-Scanner 5. OpenSSF Scorecard

        Read full on X, posted by @Vierulent

        @Vierulent · x.com

      • trivy ⭐ 39k Trivy is an open-source tool that scans containers, filesystems, Git repositories, and cloud configurations for vulnerabilities. 🔗 #opensource

        Read full on X, posted by @gitrepos

        @gitrepos · x.com

    3. Nov 61 post

      • AI is starting to make cybersecurity workflows way more accessible. 1. Garak 2. PyRIT 3. Promptfoo 4. LLM Guard 5. NeMo Guardrails 6. Giskard 7. Semgrep 8. Trivy 9. Strix 10. OpenVAS Save this stack

        Read full on X, posted by @RoundtableSpace

        @RoundtableSpace · x.com

    4. 1 month earlier
    5. Oct 61 post

      • Trivy: a comprehensive and versatile security scanner (38k stars)

        Read full on Reddit

        r/BestGitHubRepos

    6. Sep 303 posts

      • trivy（何を走査するかと何を調べるかを二軸に分ける） セキュリティは出荷口ではなく入荷口で止めるべきである。aquasecurity の trivy はまさにその位置に置かれている。38,144 スター、Apache-2.0 ライセンス、2019 年 4 月 11 日作成、今日もコミットが続き、Go で書かれ、バイナリひとつで動く。…

        Read full on X, posted by @KomatsuSo68

        @KomatsuSo68 · x.com

      • trivy (what to scan and what to look for, split into two dimensions) Security belongs at the factory gate, not the loading dock. The trivy tool from aquasecurity sits at exactly that position, with…

        Read full on X, posted by @KomatsuSo68

        @KomatsuSo68 · x.com

      • trivy（扫什么和查什么，拆成两维） 安全要把关在进厂，不在出厂。aquasecurity 的 trivy 就是按这个位置设计的，38,144 颗星，Apache-2.0 协议，2019 年 4 月 11 号建库，今天还在推，Go 写的，一个二进制文件搞定。 它把活儿拆成两维。第一维是扫什么，容器镜像、文件系统、远程 Git 仓库、虚拟机镜像、Kubernetes。第二维是查什么，软件物料清单…

        Read full on X, posted by @KomatsuSo68

        @KomatsuSo68 · x.com

    7. 2 months earlier
    8. Aug 151 post

      • Hyprland A sleek, dynamic tiling Wayland compositor. Fast, customizable, and built for people who want a designed-purpose desktop.

        Read full on X, posted by @panditdhamdhere

        @panditdhamdhere · x.com

    9. Aug 101 post

      • LEAVING UNPATCHED SECURITY VULNERABILITIES HIDDEN IN CONTAINER IMAGES AND DEPENDENCY TREES LEAVES SYSTEMS WIDE OPEN. Manual security audits are slow and fail to keep pace with rapid continuous…

        Read full on X, posted by @therandomeng_

        @therandomeng_ · x.com

    You might also like

    Repositories close to aquasecurity/trivy
    FeaturedAdvertise to 180K+ monthly visitors
    Omnigraph

    Versioned graph database on object storage. Git-style workflows and multimodal retrieval

    Busbar

    Control what AI can do before it acts

    Websitebench

    Can AI agents reverse-engineer real websites?

    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    owenrumney/lazytrivy

    Go

    Vulnerability scanning just got lazier

    32910

    aquasecurity/trivy-action

    Shell

    Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

    1.5k356

    owasp-dep-scan/dep-scan

    Python

    OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

    1.3k144

    crazy-max/ghaction-container-scan

    TypeScript

    GitHub Action to check for vulnerabilities in your container image

    7615

    safedep/vet

    Go

    Protect against malicious open source packages 🤖

    1.1k119

    bridgecrewio/checkov

    Python

    Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

    9.2k1.4k

    OWASP/DockSec

    Python

    AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

    510113

    mongodb/kingfisher

    Rust

    Detect secrets. Validate them live. Map blast radius. Revoke fast. Run the CLI or embed in Rust, Python, or Node.js.

    1.3k135

    endorlabs/github-action

    TypeScript

    A GitHub action you can use to scan with Endor Labs

    534