How to install trivy

Trivy is scanner for dependencies, containers and infrastructure files. Releases and documentation are produced by the project team.

About the project

Trivy is scanner for dependencies, containers and infrastructure files. The maintainers own the project, choose releases, and publish their own documentation. This page records a few things worth knowing before you begin.

The maintainers own the project. They choose release timing, publish announcements, and write the documentation themselves. Nothing about that process is controlled from here.

How projects are distributed

Packaging differs from project to project. Some publish to system repositories, some to their own index, some only as source archives that a build tool expects.

Before you start

Check platform requirements first. Recent releases usually need a current runtime and a reasonably modern system.

Checking the result

A version query afterwards is usually enough to confirm the environment picked it up. If the result is unexpected, the usual causes are a stale path entry or a version manager resolving to a different release.

Notes on this domain

PathManual keeps reading notes about projects like this one. Nothing is stored or re-publish from this domain.