trivy vs buildkit

trivy and buildkit share 10 technologies: net/http, s3, etcd, github.com/hashicorp/golang-lru/v2, github.com/aws/aws-sdk-go-v2/credentials, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, containerd, and github.com/Azure/azure-sdk-for-go/sdk/azcore. Both are written in Go.

Read it as markdown

What they share and what sets them apart

aquasecurity

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Go39.3kRead on November 14, 2026, at commit 239be7bWhat is trivy built with?

Only in trivy

In common

moby

buildkit

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

Go10.4kRead on November 13, 2026, at commit d667ec0What is buildkit built with?

Only in buildkit

Side by side

SizeLines written by people and agents, without generated ones; code files, without tests.
trivy285,674 lines written955 code files
buildkit223,276 lines written672 code files
Who writes itA commit counts as AI's when it carries its signature: a Co-Authored-By line, its author name or the merge of its branch.
trivy0.5% of its commits signed by AIWith Claude Code, GitHub Copilot, and Cursor
buildkit0.2% of its commits signed by AIWith Codex, Claude Code, GitHub Copilot, and Cursor
ActivityFrom GitHub and its history, on the day SeeRepo read it.
trivyLast push November 13, 20264,299 commits39,321 stars
buildkitLast push November 12, 20266,140 commits10,418 stars
TestsThe files that test the code, and the share of code files a test imports.
trivy706 test files75.5% of its code files have a test that imports them
buildkit361 test files53.7% of its code files have a test that imports them

Frequently asked questions

Which is bigger, trivy or buildkit?
trivy, with 285,674 lines written; buildkit has 223,276.

The proof: aquasecurity/trivy's code at commit 239be7b

Which has more GitHub stars, trivy or buildkit?
trivy, with 39,321 stars; buildkit has 10,418.

The proof: aquasecurity/trivy on GitHub

Which has more tests, trivy or buildkit?
trivy, with 706 test files; buildkit has 361.

The proof: aquasecurity/trivy's code at commit 239be7b

Which was updated more recently, trivy or buildkit?
trivy: its last push was on November 13, 2026, and buildkit's on November 12, 2026.

The proof: aquasecurity/trivy's commits on GitHub

Which has more commits signed by AI, trivy or buildkit?
trivy: an AI signed 0.5% of its commits, with Claude Code, GitHub Copilot, and Cursor; in buildkit, 0.2%.

The proof: the commits each tool signed in aquasecurity/trivy

See inside your code, today.

Paste your repo and see it drawn, part by part: a medium one in under a minute.

Free, no account.

Or look inside SeeRepo's own →