Gentoo Packages

Search

Install

Install this package:

emerge -a dev-util/trivy

Package Information

Description:

Trivy is a comprehensive and versatile security scanner. It finds vulnerabilities (CVEs), misconfigurations (IaC), secrets, SBOMs and licenses across container images, file systems, Git repositories, Kubernetes clusters and cloud accounts. Trivy is easy to use, fast and integrates well into CI pipelines.

Homepage:

https://trivy.dev https://github.com/aquasecurity/trivy

License:

Apache-2.0 BSD BSD-2 ISC MIT MPL-2.0 Unlicense

Versions

Metadata

Description

• Trivy is a comprehensive and versatile security scanner. It finds vulnerabilities (CVEs), misconfigurations (IaC), secrets, SBOMs and licenses across container images, file systems, Git repositories, Kubernetes clusters and cloud accounts. Trivy is easy to use, fast and integrates well into CI pipelines.

Maintainers

• Lucas Couto (otakugeekx@gmail.com) - Type: person

Upstream

• Bugs: https://github.com/aquasecurity/trivy/issues
• Remote IDs:
  • github: aquasecurity/trivy

<pkgmetadata>
	<maintainer type="person">
		<email>otakugeekx@gmail.com</email>
		<name>Lucas Couto</name>
	</maintainer>
	<longdescription lang="en">
		Trivy is a comprehensive and versatile security scanner. It finds
		vulnerabilities (CVEs), misconfigurations (IaC), secrets, SBOMs and
		licenses across container images, file systems, Git repositories,
		Kubernetes clusters and cloud accounts. Trivy is easy to use, fast and
		integrates well into CI pipelines.
	</longdescription>
	<upstream>
		<bugs-to>https://github.com/aquasecurity/trivy/issues</bugs-to>
		<remote-id type="github">aquasecurity/trivy</remote-id>
	</upstream>
</pkgmetadata>

Lint Warnings

• Bypassing the network sandbox using `RESTRICT="network-sandbox"` violates Gentoo's core packaging policies. Ebuilds must support offline and reproducible builds, meaning all assets must be fetched via `SRC_URI` during the fetch phase and verified using Manifest checksums. To resolve this, you should package the required dependencies (e.g., node modules, cargo crates) into a tarball, host it, reference it in `SRC_URI` and perform an offline installation.
• [Error] Missing md5-cache for ebuild trivy-0.72.0

Manifest