trivy vs buildkit
trivy and buildkit share 10 technologies: net/http, s3, etcd, github.com/hashicorp/golang-lru/v2, github.com/aws/aws-sdk-go-v2/credentials, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, containerd, and github.com/Azure/azure-sdk-for-go/sdk/azcore. Both are written in Go.
What they share and what sets them apart
trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Go39.3kRead on November 14, 2026, at commit 239be7bWhat is trivy built with?Only in trivy
- go-redis
- Trivy
- Redis
- SQLite
- github.com/knqyf263/go-rpmdb
- GitHub
github.com/twitchtv/twirp
- github.com/aquasecurity/table
- github.com/cheggaaa/pb/v3
github.com/nikolalohinski/gonja/v2
- github.com/google/jsonschema-go
github.com/moby/moby/client
github.com/moby/moby/api
- Helm
github.com/aws/aws-sdk-go-v2/service/ecr
- github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry
In common
buildkit
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
Go10.4kRead on November 13, 2026, at commit d667ec0What is buildkit built with?Only in buildkit
- github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
- github.com/containerd/console
- github.com/morikuni/aec
- github.com/tonistiigi/vt100
- github.com/tonistiigi/go-csvvalue
- OpenTelemetry
- github.com/sirupsen/logrus
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
github.com/containerd/stargz-snapshotter/estargz
- github.com/containerd/accelerated-container-image
- github.com/containerd/nydus-snapshotter
github.com/containerd/go-runc
github.com/coreos/go-systemd/v22
- github.com/Microsoft/hcsshim
github.com/containerd/fuse-overlayfs-snapshotter/v2
github.com/containerd/stargz-snapshotter
github.com/containernetworking/plugins
- github.com/prometheus/client_golang
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
- go.opentelemetry.io/otel/exporters/jaeger
- go.opentelemetry.io/otel/exporters/prometheus
Side by side
Frequently asked questions
Which is bigger, trivy or buildkit?
The proof: aquasecurity/trivy's code at commit 239be7b
Which has more GitHub stars, trivy or buildkit?
The proof: aquasecurity/trivy on GitHub
Which has more tests, trivy or buildkit?
The proof: aquasecurity/trivy's code at commit 239be7b
Which was updated more recently, trivy or buildkit?
The proof: aquasecurity/trivy's commits on GitHub
Which has more commits signed by AI, trivy or buildkit?
The proof: the commits each tool signed in aquasecurity/trivy
See inside your code, today.
Paste your repo and see it drawn, part by part: a medium one in under a minute.
Free, no account.

