Trivy

DevOps & CI/CD - Secrets & Security
Trivy screenshot
Visit

Trivy is an all-in-one security scanner designed to identify vulnerabilities (CVEs), configuration misconfigurations (IaC), secret leaks, and software bills of materials (SBOMs). It supports a wide range of targets including code repositories, container images, file systems, and Kubernetes clusters. Built for continuous integration pipelines and cloud-native environments, Trivy helps developers secure applications across the software development lifecycle without slowing down deployment workflows.

Pricing
Free
Features
Open SourceSelf-hosted

Checked on Sep 30, 2026.


Alternative resources

DDEV

Docker-based local development environment for PHP, Node.js, and CMS projects with automated configuration and SSL support.

FreeOpen SourceSelf-hosted

Proxed.AI

Secure AI APIs in mobile applications without SDKs or backends using split-key architecture and hardware-level device attestation.

FreeFreemiumPaidOpen SourceSelf-hosted

Dokku

An open source Platform-as-a-Service (PaaS) built on Docker and Git, allowing deployment of Heroku-compatible applications on single hardware hosts.

FreeOpen SourceSelf-hosted