Trivy (trivy)
Vulnerability scanning.
Generated from catalog/components/trivy.yaml: do not edit by hand.
| Purpose | Vulnerability scanning |
| Kit capability | Vulnerability scanning |
| Plane | infrastructure and DevSecOps |
| State | integrated |
| Pinned version | 0.58.1 |
| Licence | Apache-2.0 |
| Licence text | https://raw.githubusercontent.com/aquasecurity/trivy/v0.58.1/LICENSE (checked on 2026-10-30) |
| Licence status | allowed |
| Licence exception | - |
| Upstream repository | https://github.com/aquasecurity/trivy |
| Owner | security-engineering |
| Distribution | CI tool |
Images and version pins
| Role | Kind | File | Value |
|---|---|---|---|
| CI | text | .forgejo/workflows/ci.yml | aquasec/trivy:0.58.1 |
Container images
No container image is pinned by reference in this manifest.
Dependencies
This component has no dependency.
Operations
| Supported | install, configure, upgrade, rollback, decommission |
| Not supported | start, stop, restart, rolling-restart, drain, scale, backup, restore, repair, rotate |
Back to the component index.