Trivy v0.76.2

Trivy is an open source security scanning tool that analyzes container images, file systems, repositories, and cloud configurations. It helps teams identify known vulnerabilities and security risks before applications are deployed to production.

The tool integrates easily into continuous integration and continuous deployment pipelines, making it suitable for both small teams and enterprise environments.

Download Trivy v0.76.2 - Software Mirrors

Trivy v0.76.2 for Windows

trivy_0.76.2_windows-64bit.zip | 51.41 MB

Trivy v0.76.2 for macOS

trivy_0.76.2_macOS-ARM64.tar.gz | 47.53 MB

trivy_0.76.2_macOS-64bit.tar.gz | 51.3 MB

Trivy v0.76.2 for Linux

trivy_0.76.2_Linux-s390x.tar.gz | 47.98 MB

trivy_0.76.2_Linux-s390x.rpm | 47.89 MB

trivy_0.76.2_Linux-s390x.deb | 47.97 MB

trivy_0.76.2_Linux-PPC64LE.tar.gz | 44.75 MB

trivy_0.76.2_Linux-PPC64LE.rpm | 44.61 MB

trivy_0.76.2_Linux-PPC64LE.deb | 44.75 MB

trivy_0.76.2_Linux-ARM64.tar.gz | 45.24 MB

trivy_0.76.2_Linux-ARM64.rpm | 45.1 MB

trivy_0.76.2_Linux-ARM64.deb | 45.24 MB

trivy_0.76.2_Linux-ARM.tar.gz | 46.64 MB

trivy_0.76.2_Linux-ARM.rpm | 46.52 MB

trivy_0.76.2_Linux-ARM.deb | 46.63 MB

trivy_0.76.2_Linux-64bit.tar.gz | 50.27 MB

trivy_0.76.2_Linux-64bit.rpm | 50.23 MB

trivy_0.76.2_Linux-64bit.deb | 50.27 MB

trivy_0.76.2_Linux-32bit.tar.gz | 46 MB

trivy_0.76.2_Linux-32bit.rpm | 45.97 MB

trivy_0.76.2_Linux-32bit.deb | 45.99 MB

Trivy v0.76.2 for BSD

trivy_0.76.2_FreeBSD-64bit.tar.gz | 50.1 MB

Others Download related to Trivy v0.76.2

trivy_0.76.2_checksums.txt | 2.07 kB

Trivy v0.76.2 Source Code

Trivy v0.76.2 Source code (zip)

Trivy v0.76.2 Source code (tar.gz)

Trivy v0.76.2 Release Notes:

🔐 Security update 🛡️

Trivy v0.76.2 bundles several security fixes:
  • Official container images are rebuilt on Alpine 3.24.3, which fixes musl/musl-utils (CVE-2026-107891), and the build picks up fixed libcurl (24 CVEs, including HIGH CVE-2026-92392) and brotli-libs (CVE-2026-111497) from the v3.24 package repository.
  • golang.org/x/net is bumped to v0.62.0, fixing two vulnerabilities in golang.org/x/net/html: CVE-2026-78661 (quadratic complexity when coalescing text nodes) and CVE-2026-97045 (missing ancestor namespace check when rendering raw text).
We recommend upgrading to v0.76.2 and redeploying container images to apply these updates.

Changelog

  • 3f6334d223b52188324af3b9923b4249cd206652 release: v0.76.2 [release/v0.76] (#11552)
  • 1cabe83c11ffed6e984ab46be8886e1e01516ead fix(deps): bump golang.org/x/net from 0.61.0 to 0.62.0 [backport: release/v0.76] (#11554)
  • be08de47d0d76fca7e992c0f47fbcf7853f8a713 chore(deps): bump the common group across 1 directory with 14 updates [backport: release/v0.76] (#11555)
  • a8537d389cbd0fa215eddfddc27150fc7bc82a6c fix(deps): bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 [backport: release/v0.76] (#11553)
  • ae26b88c3b3c380808e767dfb63f9b8dcd5f64fd fix(deps): bump alpine to 3.24.3 in container images [backport: release/v0.76] (#11551)

Key Features

Trivy scans container images for operating system and application dependency vulnerabilities. It also supports file system and repository scanning to detect issues in source code and packaged applications.

The tool can identify misconfigurations in infrastructure as code files such as Kubernetes manifests and Terraform configurations. It also detects exposed secrets like API keys and tokens stored in repositories.

Trivy provides clear and actionable scan results with severity levels, helping teams prioritize fixes efficiently.

Ease of Use

Trivy is designed to be easy to use with minimal setup. A single command is often enough to start scanning, and results are returned quickly.

Its straightforward output format makes it suitable for developers, security engineers, and automation pipelines without requiring complex configuration.

Performance and Compatibility

Trivy is lightweight and fast, even when scanning large container images or repositories. It supports major operating systems and works well in local development environments, CI pipelines, and cloud based workflows.

It is compatible with popular container runtimes and orchestration platforms commonly used in modern DevOps setups.

Pros and Cons

Advantages include fast scanning speed, wide coverage across containers and infrastructure code, simple command line usage, and strong integration with CI pipelines.

Limitations include limited advanced reporting features in default output, dependency on vulnerability databases that require regular updates, and focus primarily on detection rather than remediation.

Final Verdict

Trivy is a powerful and practical security scanning tool for modern application development. Its ability to quickly identify vulnerabilities and misconfigurations makes it a valuable component of secure DevOps pipelines.

For teams seeking an efficient and developer friendly security scanner, Trivy is a highly recommended solution.

Trivy is a fast and reliable security scanner designed to detect vulnerabilities, misconfigurations, and sensitive information across modern application environments. It is widely used in DevOps and cloud native workflows to improve software security early in the development lifecycle. Trivy is known for its simplicity, speed, and broad coverage.

Trivy v0.76.2
Free
Software Informations:
Developer:

Operating System:
Windows / macOS / Linux / FreeBSD
Date Added:
2026-11-05T15:07:18.211Z
Categories:

Post a Comment/Report Broken Link: