Repositories list

• vuln-list-redhat

  Public

  aquasecurity/vuln-list-redhat’s past year of commit activity
  Red Hat security advisories

  17•10•0•0•Updated Nov 9, 2025Nov 9, 2025

• vuln-list

  Public

  aquasecurity/vuln-list’s past year of commit activity
  NVD, Ubuntu, Alpine

  29•442•11•0•Updated Nov 9, 2025Nov 9, 2025

• vuln-list-nvd

  Public

  aquasecurity/vuln-list-nvd’s past year of commit activity
  NVD

  10•11•0•0•Updated Nov 9, 2025Nov 9, 2025

• vuln-list-debian

  Public

  aquasecurity/vuln-list-debian’s past year of commit activity
  Debian Security Tracker

  13•6•0•0•Updated Nov 9, 2025Nov 9, 2025

• vexhub

  Public

  aquasecurity/vexhub’s past year of commit activity
  Apache License 2.0

  •4•28•0•0•Updated Nov 9, 2025Nov 9, 2025

• trivy-operator

  Public
  Kubernetes-native security toolkit

  kubernetesgolangsecurity+ 7operatorcloud-nativevulnerability-detectionvulnerability-scannerssecurity-toolsmisconfigurationoctoberfest

  Go

  •

  Apache License 2.0

  •253•1.7k•119•47•Updated Nov 7, 2025Nov 7, 2025

• trivy-vscode-extension

  Public

  aquasecurity/trivy-vscode-extension’s past year of commit activity
  A VS Code Extension for Trivy

  vscode-extensionvulnerability-scanning

  TypeScript

  •

  Apache License 2.0

  •25•150•2•1•Updated Nov 6, 2025Nov 6, 2025

• tracee

  Public

  aquasecurity/tracee’s past year of commit activity
  Linux Runtime Security and Forensics using eBPF

  linuxdockerkubernetes+ 5golangsecurityebpfbpfruntime-security

  Go

  •

  Apache License 2.0

  •472•4.2k•129•30•Updated Nov 6, 2025Nov 6, 2025

• trivy

  Public

  aquasecurity/trivy’s past year of commit activity
  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  godockerkubernetes+ 12golangsecuritycontainersiacvulnerabilityinfrastructure-as-codevulnerability-detection+ 5

  Go

  •

  Apache License 2.0

  •2.8k•30k•161•60•Updated Nov 6, 2025Nov 6, 2025

• trivy-aws

  Public
  Go

  •

  MIT License

  •15•20•3•14•Updated Nov 6, 2025Nov 6, 2025

• trivy-checks

  Public
  Open Policy Agent

  •

  MIT License

  •45•57•2•16•Updated Nov 6, 2025Nov 6, 2025

• intellij-trivy

  Public

  aquasecurity/intellij-trivy’s past year of commit activity
  Trivy Plugin for the JetBrains family of IDEs

  Kotlin

  •

  Apache License 2.0

  •4•9•4•0•Updated Nov 6, 2025Nov 6, 2025

• vuln-list-update

  Public
  Go

  •

  Apache License 2.0

  •112•187•7•15•Updated Nov 6, 2025Nov 6, 2025

• terraform-provider-aquasec

  Public
  The Aqua Security Provider for Terraform allows you to declaratively define the configuration of your Aqua platform.

  Go

  •

  Apache License 2.0

  •41•37•8•4•Updated Nov 6, 2025Nov 6, 2025

• tfsec

  Public

  aquasecurity/tfsec’s past year of commit activity
  Tfsec is now part of Trivy

  goawssecurity+ 16digitaloceandevopsciazureterraformscannerlinter+ 9

  Go

  •

  MIT License

  •556•6.9k•0•13•Updated Nov 5, 2025Nov 5, 2025

• trivy-db

  Public

  aquasecurity/trivy-db’s past year of commit activity
  hacktoberfest

  Go

  •

  Apache License 2.0

  •167•285•45•24•Updated Nov 5, 2025Nov 5, 2025

• kube-bench

  Public

  aquasecurity/kube-bench’s past year of commit activity
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

  kubernetesopenshifthacktoberfest+ 5cis-benchmarkkube-benchkubernetes-securitycis-kubernetes-benchmarkcis-security

  Go

  •

  Apache License 2.0

  •1.3k•7.8k•59•15•Updated Nov 5, 2025Nov 5, 2025

• trivy-mcp

  Public

  aquasecurity/trivy-mcp’s past year of commit activity
  Trivy plugin for starting an MCP server - experimental

  Go

  •

  MIT License

  •4•26•2•0•Updated Nov 5, 2025Nov 5, 2025

• trivy-plugin-index

  Public
  Plugin index for Trivy. This repo is for plugin maintainers.

  Go

  •

  Apache License 2.0

  •7•6•0•2•Updated Nov 5, 2025Nov 5, 2025

• go-git-pr-commenter

  Public

  aquasecurity/go-git-pr-commenter’s past year of commit activity
  library for adding comments to git PRs

  Go

  •

  Apache License 2.0

  •2•14•0•8•Updated Nov 4, 2025Nov 4, 2025

• trivy-azure-pipelines-task

  Public
  Azure Pipelines Task for trivy

  extensionhacktoberfestazure-devops+ 2trivyazure-pipelines-task

  TypeScript

  •

  MIT License

  •36•66•0•0•Updated Nov 4, 2025Nov 4, 2025

• trivy-plugin-aqua

  Public

  aquasecurity/trivy-plugin-aqua’s past year of commit activity
  Makefile

  •

  Apache License 2.0

  •10•11•3•0•Updated Nov 4, 2025Nov 4, 2025

• k8s-node-collector

  Public
  Go

  •

  Apache License 2.0

  •3•10•0•9•Updated Nov 3, 2025Nov 3, 2025

• aqua-helm

  Public

  aquasecurity/aqua-helm’s past year of commit activity
  Helm Charts For Installing Aqua Security Components

  kubernetesscannerhelm-charts+ 4security-toolsenforceraqua-agentaqua-server

  Mustache

  •

  Apache License 2.0

  •190•88•6•3•Updated Oct 30, 2025Oct 30, 2025

• secfixes-tracker

  Public
  Forked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker

  Python

  •

  Other

  •8•7•0•0•Updated Oct 28, 2025Oct 28, 2025

• starboard

  Public

  aquasecurity/starboard’s past year of commit activity
  Superseded by https://github.com/aquasecurity/trivy-operator

  kubernetessecuritycloud-native+ 2starboardcustom-resource-definition

  Go

  •

  Apache License 2.0

  •198•1.4k•40•19•Updated Oct 28, 2025Oct 28, 2025

• btfhub-archive

  Public
  The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing the versatility of eBPF programs across different kernel versions.

  Apache License 2.0

  •26•123•0•0•Updated Oct 28, 2025Oct 28, 2025

• vexhub-crawler

  Public
  Collect VEX documents and update VEX Hub

  Go

  •

  Apache License 2.0

  •7•7•0•1•Updated Oct 27, 2025Oct 27, 2025

• libbpfgo

  Public

  aquasecurity/libbpfgo’s past year of commit activity
  eBPF library for Go. Powered by libbpf.

  golinuxgolang+ 2ebpfbpf

  Go

  •

  Apache License 2.0

  •101•822•32•2•Updated Oct 27, 2025Oct 27, 2025

• terraform-aws-onboarding

  Public

  aquasecurity/terraform-aws-onboarding’s past year of commit activity
  Terraform module to configure Aqua Security’s CSPM and agentless solutions on AWS

  awsaquaterraform-module

  HCL

  •

  Apache License 2.0

  •3•6•1•0•Updated Oct 26, 2025Oct 26, 2025