Trivy Container Image Vulnerability Scanner

---
name: "Trivy Container Image Vulnerability Scanner"
slug: "trivy-container-image-vulnerability-scanner"
description: "Scans Docker and OCI container images with Aqua Trivy for CVEs in OS packages and language dependencies. Outputs filterable vulnerability tables with CVSS scores and fix versions."
github_stars: 34488
verification: "security_reviewed"
source: "https://github.com/aquasecurity/trivy"
category: "Security & Verification"
framework: "Claude Code"
tool_ecosystem:
  github_repo: "aquasecurity/trivy"
  github_stars: 34488
---

# Trivy Container Image Vulnerability Scanner

Scans Docker and OCI container images with Aqua Trivy for CVEs in OS packages and language dependencies. Outputs filterable vulnerability tables with CVSS scores and fix versions.

## Installation

Requirements and caveats from upstream:
- ![Docker Pulls][docker-pulls]
- docker run aquasec/trivy
- There are canary builds ([Docker Hub](https://hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary), [GitHub](https://github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary), [ECR](https://gallery.ec...

Basic usage or getting-started notes:
- ### Get Trivy
- Trivy is available in most common distribution channels. The full list of installation options is available in the [Installation] page. Here are a few popular examples:
- brew install trivy

- Source: https://github.com/aquasecurity/trivy
- Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/trivy/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/trivy-container-image-vulnerability-scanner/)