#929458 ITP: trivy -- A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

Package:
wnpp
Source:
wnpp
Submitter:
Nobuhiro Iwamatsu
Date:
2025-11-29 16:44:23 UTC
Severity:
wishlist
#929458#5
Date:
2019-05-23 20:21:46 UTC
From:
To:
* Package name    : trivy
  Version         : 0.1.1
  Upstream Author : Teppei Fukuda <knqyf263@gmail.com>
* URL             : https://github.com/knqyf263/trivy/
* License         : AGPL-3
  Programming Lang: Go
  Description     : A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

Trivy (tri pronounced like trigger, vy pronounced like envy) is a simple
and comprehensive vulnerability scanner for containers. Trivy detects
vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application
dependencies (Bundler, Composer, npm, yarn etc.). Trivy is easy to use.
Just install the binary and you're ready to scan. All you need to do for
scanning is to specify an image name of container.
#929458#10
Date:
2022-07-06 09:41:51 UTC
From:
To:
Hi Nobuhiro,

Any updates on this? Blocked on anything? Do you need any help?

Thanks,
Domenico
#929458#19
Date:
2023-04-28 10:02:26 UTC
From:
To:
Our friends from openSUSE have this packaged already. We can probably use that as inspiration.

https://software.opensuse.org/package/trivy
#929458#24
Date:
2023-05-01 10:58:40 UTC
From:
To:
Hello,

Unfortunately, there are quite a few dependencies that haven't been
packaged yet.




































*dh-make-golang github.com/aquasecurity/trivy
<http://github.com/aquasecurity/trivy>...2023/05/01 10:55:44
Build-Dependency "github.com/google/licenseclassifier
<http://github.com/google/licenseclassifier>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/masahiro331/go-ext4-filesystem
<http://github.com/masahiro331/go-ext4-filesystem>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/magefile/mage <http://github.com/magefile/mage>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/masahiro331/go-disk <http://github.com/masahiro331/go-disk>" is
not yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/masahiro331/go-vmdk-parser
<http://github.com/masahiro331/go-vmdk-parser>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/masahiro331/go-xfs-filesystem
<http://github.com/masahiro331/go-xfs-filesystem>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/CycloneDX/cyclonedx-go
<http://github.com/CycloneDX/cyclonedx-go>" is not yet available in Debian,
or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency "k8s.io/api
<http://k8s.io/api>" is not yet available in Debian, or has not yet been
converted to use XS-Go-Import-Path in debian/control2023/05/01 10:55:44
Build-Dependency "modernc.org/sqlite <http://modernc.org/sqlite>" is not
yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/spdx/tools-golang <http://github.com/spdx/tools-golang>" is not
yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/defsec <http://github.com/aquasecurity/defsec>" is
not yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/in-toto/in-toto-golang
<http://github.com/in-toto/in-toto-golang>" is not yet available in Debian,
or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency "github.com/samber/lo
<http://github.com/samber/lo>" is not yet available in Debian, or has not
yet been converted to use XS-Go-Import-Path in debian/control2023/05/01
10:55:44 Build-Dependency "github.com/aquasecurity/go-npm-version
<http://github.com/aquasecurity/go-npm-version>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/sigstore/rekor <http://github.com/sigstore/rekor>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/moby/buildkit <http://github.com/moby/buildkit>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/trivy-kubernetes
<http://github.com/aquasecurity/trivy-kubernetes>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/owenrumney/go-sarif <http://github.com/owenrumney/go-sarif>" is
not yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/package-url/packageurl-go
<http://github.com/package-url/packageurl-go>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/sosedoff/gitkit <http://github.com/sosedoff/gitkit>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/go-gem-version
<http://github.com/aquasecurity/go-gem-version>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/bolt-fixtures
<http://github.com/aquasecurity/bolt-fixtures>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/trivy-java-db
<http://github.com/aquasecurity/trivy-java-db>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/trivy-db
<http://github.com/aquasecurity/trivy-db>" is not yet available in Debian,
or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/go-pep440-version
<http://github.com/aquasecurity/go-pep440-version>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/tetratelabs/wazero <http://github.com/tetratelabs/wazero>" is
not yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/openvex/go-vex <http://github.com/openvex/go-vex>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/tml <http://github.com/aquasecurity/tml>" is not
yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/testdocker
<http://github.com/aquasecurity/testdocker>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/open-policy-agent/opa
<http://github.com/open-policy-agent/opa>" is not yet available in Debian,
or has not yet been converted to use XS-Go-Import-Path in
debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/aquasecurity/loading <http://github.com/aquasecurity/loading>"
is not yet available in Debian, or has not yet been converted to use
XS-Go-Import-Path in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/GoogleCloudPlatform/docker-credential-gcr
<http://github.com/GoogleCloudPlatform/docker-credential-gcr>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/twitchtv/twirp <http://github.com/twitchtv/twirp>" is not yet
available in Debian, or has not yet been converted to use XS-Go-Import-Path
in debian/control2023/05/01 10:55:44 Build-Dependency
"github.com/masahiro331/go-ebs-file
<http://github.com/masahiro331/go-ebs-file>" is not yet available in
Debian, or has not yet been converted to use XS-Go-Import-Path in
debian/control*