Trivy

Developer Tools

A comprehensive security scanner for containers, code repositories and clouds.

Latest v0.73.0 · by Aqua SecurityWebsiteaquasecurity/trivy

Release activity

Release activity — 8 releases across 8 days in the last year. Each cell is one day; darker means more releases that day. Older weeks are hidden at this screen width.
MayJunJulAug
SundayNo releases on Apr 26, 2026No releases on May 3, 2026No releases on May 10, 2026No releases on May 17, 2026No releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026
MondayNo releases on Apr 27, 2026No releases on May 4, 2026No releases on May 11, 2026No releases on May 18, 2026No releases on May 25, 20261 release on Jun 1, 2026No releases on Jun 8, 20261 release on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 20261 release on Aug 3, 2026No releases on Aug 10, 2026
TuesdayNo releases on Apr 28, 2026No releases on May 5, 2026No releases on May 12, 2026No releases on May 19, 2026No releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 20261 release on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026
WednesdayNo releases on Apr 29, 2026No releases on May 6, 2026No releases on May 13, 2026No releases on May 20, 2026No releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026
ThursdayNo releases on Apr 30, 2026No releases on May 7, 2026No releases on May 14, 2026No releases on May 21, 2026No releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026
FridayNo releases on May 1, 2026No releases on May 8, 2026No releases on May 15, 2026No releases on May 22, 2026No releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 20261 release on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026
SaturdayNo releases on May 2, 2026No releases on May 9, 2026No releases on May 16, 2026No releases on May 23, 2026No releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026

8 releases in the last year

Changelog

v0.73.0

Added 3
  • Add support for detecting vulnerabilities in Dart/Flutter packages
  • Add Kubernetes config scanner support
  • Add SBOM generation for container images
Changed 1
  • Improve performance of vulnerability scanning for large images
Fixed 2
  • Fix false positives in Java dependency detection
  • Fix handling of Python packages with complex version specifiers
⚡ Highlights ⚡

👉 https://github.com/aquasecurity/trivy/discussions/11033

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0730-2026-08-03

View originalPermalink
How v0.73.0 went

v0.71.2

Changed 1
  • Update common dependencies
Fixed 1
  • Bump alpine to 3.24.1
Changelog
  • 055a5c8a53bfd61f7a8e276a5b2f0c3fc1673420 release: v0.71.2 [release/v0.71] (#10871)
  • 875328a4138f26e8559cfee80adaef82b6693076 fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#10870)
  • 998f7b3c3f3c9de2132bc4358970eeafbd797fba chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#10867)
View originalPermalink
How v0.71.2 went

v0.71.1

Fixed 4
  • Validate artifact filename in OCI
  • Forward ospkg detector options through ospkg.NewScanner
  • Load VEX documents from within the repository directory
  • Surface the original analysis error instead of context cancellation
Changelog
  • 164b383121351c2d49c5d354c2245719d972752b release: v0.71.1 [release/v0.71] (#10818)
  • a72d9a4d997c25fbb6534e231b4e206c9b202b31 fix(oci): validate artifact filename
  • 3dd98471dfbbc4a95edd5cd866468d3a8c87fd17 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
  • a62cbe40a240d3a3f568401b8a5f86e14114e371 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
  • 43d1d2628725e913db110b89419f0bebd36f58a8 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
  • ac7696c7b50d633183ce2ff44898d4b5c6eae565 ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)
View originalPermalink
How v0.71.1 went

v0.71.0

Added 2
  • Support for scanning and detecting vulnerabilities in Kubernetes workloads
  • New integration with additional container registries for artifact scanning
Changed 2
  • Improved performance for large-scale vulnerability database queries
  • Enhanced filtering options for vulnerability reports
Fixed 1
  • Resolved issues with SBOM generation for certain container image formats
⚡ Highlights ⚡

👉 https://github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

View originalPermalink
How v0.71.0 went

v0.69.3

Fixed 1
  • Bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5
Changelog
  • 6fb20c8edd70745d6b34bff0387b53b03c8a760a release: v0.69.3 [release/v0.69] (#10293)
  • dabefec57d099184bc8bd268dea23cd5d502f9cc fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)
View originalPermalink
How v0.69.3 went

v0.69.2

Fixed 2
  • Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0
  • Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
Changelog
  • cfa322ed23f2e33ef1632ae3a5a8c7172f06a5c3 release: v0.69.2 [release/v0.69] (#10266)
  • 86debce0f4897e9501368fe0611c5ae472a141eb fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)
  • cf3d4cd6a8bdf5b5b1d701f591bd8aaabd2c7c27 fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)
  • 6dfd3b078b95d30e812e04f13fd1cac7e08f9b4e ci: remove apidiff workflow
View originalPermalink
How v0.69.2 went

v0.26.0

Added 3
  • Warn when mixing Alpine versions
  • Support apk repositories for Alpine
  • Support go.mod in Go 1.17+
Changed 2
  • Update ASFF template
  • Replace containerd/containerd version to fix CVE-2022-23648
Fixed 2
  • Fix panic when scanning .egg archive in Python
  • Set correct go modules type
Changelog
  • a0047a79 feat(alpine): warn mixing versions (#2000)
  • d786655a Update ASFF template (#1914)
  • a02cf651 chore(deps): replace containerd/containerd version to fix CVE-2022-23648 (#1994)
  • 613e38cc chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  • 3b6d65be test(go): add integration tests for gomod (#1989)
  • 22f5b938 fix(python): fixed panic when scan .egg archive (#1992)
  • 485637c2 fix(go): set correct go modules type (#1990)
  • 6fdb554a feat(alpine): support apk repositories (#1987)
  • d9bddb90 docs: add CBL-Mariner (#1982)
  • 1cf1873f docs(go): fix version (#1986)
  • d77dbe8a feat(go): support go.mod in Go 1.17+ (#1985)
  • 32bd1e48 ci: fix URLs in the PR template (#1972)
  • 94a5a180 ci: add semantic pull requests check (#1968)
  • 72d94b21 docs(issue): added docs for wrong detection issues (#1961)
View originalPermalink
How v0.26.0 went

v0.25.4

Added 1
  • Add PkgPath in table result
Changed 1
  • Use file name instead of package path in table output
Fixed 2
  • Add --db-repository flag to SBOM functionality
  • Merge multiple pom imports in a better manner
Changelog
  • b4a7d6a8 docs: move CONTRIBUTING.md to docs (#1971)
  • 0127c1d3 refactor(table): use file name instead package path (#1966)
  • a92da722 fix(sbom): add --db-repository (#1964)
  • b0f3864e feat(table): add PkgPath in table result (#1960)
  • 0b1d32c1 fix(pom): merge multiple pom imports in a good manner (#1959)
View originalPermalink
How v0.25.4 went

More in Developer Tools

View all
yt-dlp

A feature-rich command-line audio/video downloader

yt-dlp
tmux

tmux release notes.

tmux
GitHub CLI

GitHub command-line tool

GitHub
Claude Code

Anthropic's agentic coding tool for the terminal, IDE and web.

Anthropic
Shadowrocket

Rule based proxy utility client for iPhone/iPad.

Shadow Launch Technology Limited
AWS CLI

One tool to manage every AWS service from the command line, and script them.

Amazon Web Services

Discussion