Container Image Vulnerability Scanner

---
name: "Container Image Vulnerability Scanner"
slug: "container-image-vulnerability-scanner"
description: "Scans Docker and OCI container images for vulnerabilities using Trivy JSON output and the Docker Hub API v2 for image metadata. Analyzes base image layers via Syft SBOM generation and maps CVEs to fixed versions using the Alpine SecDB and Debian Security Tracker APIs."
github_stars: 34773
verification: "security_reviewed"
source: "https://github.com/aquasecurity/trivy"
author: "Aqua Security"
category: "Security & Verification"
framework: "Gemini"
tool_ecosystem:
  github_repo: "aquasecurity/trivy"
  github_stars: 34773
---

# Container Image Vulnerability Scanner

Scans Docker and OCI container images for vulnerabilities using Trivy JSON output and the Docker Hub API v2 for image metadata. Analyzes base image layers via Syft SBOM generation and maps CVEs to fixed versions using the Alpine SecDB and Debian Security Tracker APIs.

## Installation

Requirements and caveats from upstream:
- ![Docker Pulls][docker-pulls]
- docker run aquasec/trivy
- There are canary builds ([Docker Hub](https://hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary), [GitHub](https://github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary), [ECR](https://gallery.ec...

Basic usage or getting-started notes:
- ### Get Trivy
- Trivy is available in most common distribution channels. The full list of installation options is available in the [Installation] page. Here are a few popular examples:
- brew install trivy

- Source: https://github.com/aquasecurity/trivy
- Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/trivy/HEAD/README.md

## Documentation

- https://trivy.dev/latest/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/container-image-vulnerability-scanner/)