Repositories list

• setup-trivy

  Public

  aquasecurity/setup-trivy’s past year of commit activity
  Set up your GitHub Actions workflow with a specific version of Trivy

  Apache License 2.0

  •16•5•2•0•Updated Jan 15, 2026Jan 15, 2026

• vuln-list

  Public

  aquasecurity/vuln-list’s past year of commit activity
  NVD, Ubuntu, Alpine

  34•449•11•0•Updated Jan 15, 2026Jan 15, 2026

• trivy

  Public

  aquasecurity/trivy’s past year of commit activity
  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  godockerkubernetes+ 12golangsecuritycontainersiacvulnerabilityinfrastructure-as-codevulnerability-detection+ 5

  Go

  •

  Apache License 2.0

  •2.9k•31k•169•43•Updated Jan 15, 2026Jan 15, 2026

• vuln-list-redhat

  Public

  aquasecurity/vuln-list-redhat’s past year of commit activity
  Red Hat security advisories

  19•10•0•0•Updated Jan 15, 2026Jan 15, 2026

• secfixes-tracker

  Public

  aquasecurity/secfixes-tracker’s past year of commit activity
  Forked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker

  Python

  •

  Other

  •7•7•0•0•Updated Jan 15, 2026Jan 15, 2026

• vuln-list-nvd

  Public

  aquasecurity/vuln-list-nvd’s past year of commit activity
  NVD

  12•12•0•0•Updated Jan 15, 2026Jan 15, 2026

• vuln-list-debian

  Public

  aquasecurity/vuln-list-debian’s past year of commit activity
  Debian Security Tracker

  15•6•0•0•Updated Jan 15, 2026Jan 15, 2026

• vexhub

  Public

  aquasecurity/vexhub’s past year of commit activity
  Apache License 2.0

  •5•31•0•0•Updated Jan 15, 2026Jan 15, 2026

• tracee

  Public

  aquasecurity/tracee’s past year of commit activity
  Linux Runtime Security and Forensics using eBPF

  linuxdockerkubernetes+ 5golangsecurityebpfbpfruntime-security

  Go

  •

  Apache License 2.0

  •479•4.3k•103•14•Updated Jan 14, 2026Jan 14, 2026

• trivy-vscode-extension

  Public

  aquasecurity/trivy-vscode-extension’s past year of commit activity
  A VS Code Extension for Trivy

  vscode-extensionvulnerability-scanning

  TypeScript

  •

  Apache License 2.0

  •25•160•2•2•Updated Jan 14, 2026Jan 14, 2026

• trivy-checks

  Public

  aquasecurity/trivy-checks’s past year of commit activity
  Open Policy Agent

  •

  MIT License

  •49•65•2•10•Updated Jan 14, 2026Jan 14, 2026

• trivy-plugin-index

  Public

  aquasecurity/trivy-plugin-index’s past year of commit activity
  Plugin index for Trivy. This repo is for plugin maintainers.

  Go

  •

  Apache License 2.0

  •8•6•0•2•Updated Jan 14, 2026Jan 14, 2026

• trivy-aws

  Public

  aquasecurity/trivy-aws’s past year of commit activity
  Go

  •

  MIT License

  •15•22•3•16•Updated Jan 13, 2026Jan 13, 2026

• pipeline-parser

  Public

  aquasecurity/pipeline-parser’s past year of commit activity
  supply-chain

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Jan 13, 2026Jan 13, 2026

• trivy-plugin-aqua

  Public

  aquasecurity/trivy-plugin-aqua’s past year of commit activity
  Makefile

  •

  Apache License 2.0

  •10•11•3•1•Updated Jan 13, 2026Jan 13, 2026

• kube-bench

  Public

  aquasecurity/kube-bench’s past year of commit activity
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

  kubernetesopenshifthacktoberfest+ 5cis-benchmarkkube-benchkubernetes-securitycis-kubernetes-benchmarkcis-security

  Go

  •

  Apache License 2.0

  •1.3k•7.9k•59•18•Updated Jan 13, 2026Jan 13, 2026

• linux-bench

  Public
  Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark

  linux-cis

  Go

  •

  Apache License 2.0

  •64•180•8•3•Updated Jan 12, 2026Jan 12, 2026

• trivy-db

  Public

  aquasecurity/trivy-db’s past year of commit activity
  hacktoberfest

  Go

  •

  Apache License 2.0

  •170•295•48•25•Updated Jan 12, 2026Jan 12, 2026

• aqua-helm

  Public

  aquasecurity/aqua-helm’s past year of commit activity
  Helm Charts For Installing Aqua Security Components

  kubernetesscannerhelm-charts+ 4security-toolsenforceraqua-agentaqua-server

  Mustache

  •

  Apache License 2.0

  •189•88•8•5•Updated Jan 12, 2026Jan 12, 2026

• terraform-provider-aquasec

  Public

  aquasecurity/terraform-provider-aquasec’s past year of commit activity
  The Aqua Security Provider for Terraform allows you to declaratively define the configuration of your Aqua platform.

  Go

  •

  Apache License 2.0

  •42•37•3•0•Updated Jan 12, 2026Jan 12, 2026

• deployments

  Public

  aquasecurity/deployments’s past year of commit activity
  All Aqua deployments options and aquactl configuration

  Shell

  •

  Apache License 2.0

  •108•63•3•14•Updated Jan 8, 2026Jan 8, 2026

• trivy-operator

  Public

  aquasecurity/trivy-operator’s past year of commit activity
  Kubernetes-native security toolkit

  kubernetesgolangsecurity+ 7operatorcloud-nativevulnerability-detectionvulnerability-scannerssecurity-toolsmisconfigurationoctoberfest

  Go

  •

  Apache License 2.0

  •258•1.7k•127•53•Updated Jan 1, 2026Jan 1, 2026

• trivy-docker-extension

  Public
  Docker Desktop Extension for Trivy

  dockerimage-scanningtrivy+ 1docker-extensions

  TypeScript

  •

  Apache License 2.0

  •6•25•1•18•Updated Jan 1, 2026Jan 1, 2026

• trivy-kubernetes

  Public

  aquasecurity/trivy-kubernetes’s past year of commit activity
  Trivy kubernetes library

  Go

  •

  Apache License 2.0

  •18•36•0•9•Updated Jan 1, 2026Jan 1, 2026

• aqua-operator

  Public

  aquasecurity/aqua-operator’s past year of commit activity
  The aqua-operator is a group of controllers that runs within a Kubernetes or Openshift cluster that provides a means to deploy and manage Aqua Security cluster and Components.

  Go

  •20•38•0•1•Updated Dec 31, 2025Dec 31, 2025

• avd-generator

  Public

  aquasecurity/avd-generator’s past year of commit activity
  Generator component for AVD

  CSS

  •

  Apache License 2.0

  •15•6•1•6•Updated Dec 23, 2025Dec 23, 2025

• btfhub-archive

  Public

  aquasecurity/btfhub-archive’s past year of commit activity
  The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing the versatility of eBPF programs across different kernel versions.

  Apache License 2.0

  •27•127•0•0•Updated Dec 20, 2025Dec 20, 2025

• starboard

  Public

  aquasecurity/starboard’s past year of commit activity
  Superseded by https://github.com/aquasecurity/trivy-operator

  kubernetessecuritycloud-native+ 2starboardcustom-resource-definition

  Go

  •

  Apache License 2.0

  •197•1.4k•40•19•Updated Dec 18, 2025Dec 18, 2025

• trivy-mcp

  Public

  aquasecurity/trivy-mcp’s past year of commit activity
  Trivy plugin for starting an MCP server

  vscodecursorsecurity-scanner+ 3claudetrivymcp-server

  Go

  •

  MIT License

  •4•30•3•0•Updated Dec 17, 2025Dec 17, 2025

• vuln-list-update

  Public

  aquasecurity/vuln-list-update’s past year of commit activity
  Go

  •

  Apache License 2.0

  •113•190•8•17•Updated Dec 17, 2025Dec 17, 2025