Alternatives to aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Source: aquasecurity/trivy · SPDX licence: Apache-2.0

Comparable repositories

• deepfence/secretscanner · :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock: · MIT
• kubernetes/kompose · Convert Compose to Kubernetes · Apache-2.0
• moby/moby · The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems · Apache-2.0
• google/gvisor · Application Kernel for Containers · Apache-2.0
• kubernetes/kubernetes · Production-Grade Container Scheduling and Management · Apache-2.0
• owasp/nettacker · Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management · Apache-2.0
• gitleaks/gitleaks · Find secrets with Gitleaks 🔑 · MIT
• zizmorcore/zizmor · Static analysis for GitHub Actions (and more) · MIT
• devops-kung-fu/bomber · Scans Software Bill of Materials (SBOMs) for security vulnerabilities · MPL-2.0
• psviderski/uncloud · A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes ✨ · Apache-2.0

Comparison from the dated registry snapshot. Review each project and licence independently.