Alternatives to trivy
Other tools in this directory that do similar work, with a verified install command for each. trivy itself: install trivy.
git-secrets
Prevents you from committing secrets and credentials into git repositories
detect-secrets
An enterprise friendly way of detecting and preventing secrets in code
eslint
Find and fix problems in your JavaScript code
kubeseal
A Kubernetes controller and tool for one-way encrypted Secrets
scc
Sloc, Cloc and Code: scc is a very fast accurate code counter with complexity calculations and COCOMO estimates written in pure Go
bandit
Bandit is a tool designed to find common security issues in Python code
kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
credo
A static code analysis tool for the Elixir language with a focus on code consistency and teaching
ghorg
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
sbom-tool
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts
cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable component
dep-tree
Tool for helping developers keep their code bases clean and decoupled. It allows visualising a code base complexity using a 3d force-directed graph of
lazyjournal
TUI for viewing logs from journald, auditd, file system, Docker and Podman containers, Compose stacks and Kubernetes pods with support for log highlig
nelm
Nelm is a Helm 4 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes. The Nelm goal is to provide
git
Git Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://
prettier
Prettier is an opinionated code formatter
ruff
An extremely fast Python linter and code formatter, written in Rust
fd
A simple, fast and user-friendly alternative to 'find'
black
The uncompromising Python code formatter
VSCodium
binary releases of VS Code without MS branding/telemetry/licensing
podman
Podman: A tool for managing OCI containers and pods
cloc
cloc counts blank lines, comment lines, and physical lines of source code in many programming languages
sops
Simple and flexible tool for managing secrets
git-extras
GIT utilities -- repo summary, repl, changelog population, author commit percentages and more
How we picked these
We match on what the tool does and how it installs, then order by how widely each project is used. We're not saying these are better or worse than trivy — that depends on what you're building. We're saying they're the projects people reach for in the same situations, and each one has an install command we checked against its documentation.
trivy is developed by its own authors and this page is an independent reference; we are not affiliated with or sponsored by any project listed, and nothing here is a paid placement.