Source: https://seerepo.com/compare/aquasecurity/trivy/vs/moby/buildkit
Markdown source: https://seerepo.com/compare/aquasecurity/trivy/vs/moby/buildkit.md
Description: trivy and buildkit share 10 technologies: net/http, s3, etcd, github.com/hashicorp/golang-lru/v2, github.com/aws/aws-sdk-go-v2/credentials, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, containerd, and github.com/Azure/azure-sdk-for-go/sdk/azcore. Both are written in Go.

# trivy vs buildkit

trivy and buildkit share 10 technologies: net/http, s3, etcd, github.com/hashicorp/golang-lru/v2, github.com/aws/aws-sdk-go-v2/credentials, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, containerd, and github.com/Azure/azure-sdk-for-go/sdk/azcore. Both are written in Go.

- [aquasecurity/trivy](https://seerepo.com/r/aquasecurity/trivy): Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- [moby/buildkit](https://seerepo.com/r/moby/buildkit): concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

## What they share and what sets them apart

- In common: net/http, s3, etcd, github.com/hashicorp/golang-lru/v2, github.com/aws/aws-sdk-go-v2/credentials, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, containerd, github.com/Azure/azure-sdk-for-go/sdk/azcore
- Only in trivy: go-redis, Trivy, Redis, SQLite, github.com/knqyf263/go-rpmdb, GitHub, github.com/twitchtv/twirp, github.com/aquasecurity/table, github.com/cheggaaa/pb/v3, github.com/nikolalohinski/gonja/v2, github.com/google/jsonschema-go, github.com/moby/moby/client, github.com/moby/moby/api, Helm, github.com/aws/aws-sdk-go-v2/service/ecr, github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry
- Only in buildkit: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob, github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager, github.com/containerd/console, github.com/morikuni/aec, github.com/tonistiigi/vt100, github.com/tonistiigi/go-csvvalue, OpenTelemetry, github.com/sirupsen/logrus, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, github.com/containerd/stargz-snapshotter/estargz, github.com/containerd/accelerated-container-image, github.com/containerd/nydus-snapshotter, github.com/containerd/go-runc, github.com/coreos/go-systemd/v22, github.com/Microsoft/hcsshim, github.com/containerd/fuse-overlayfs-snapshotter/v2, github.com/containerd/stargz-snapshotter, github.com/containernetworking/plugins, github.com/prometheus/client_golang, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel/exporters/jaeger, go.opentelemetry.io/otel/exporters/prometheus

## Side by side

| | trivy | buildkit |
|---|---|---|
| Size | 285,674 lines written, 955 code files | 223,276 lines written, 672 code files |
| Who writes it | 0.5% of its commits signed by AI. With Claude Code, GitHub Copilot, and Cursor | 0.2% of its commits signed by AI. With Codex, Claude Code, GitHub Copilot, and Cursor |
| Activity | Last push November 13, 2026, 4,299 commits, 39,321 stars | Last push November 12, 2026, 6,140 commits, 10,418 stars |
| Tests | 706 test files. 75.5% of its code files have a test that imports them | 361 test files. 53.7% of its code files have a test that imports them |

- Size: Lines written by people and agents, without generated ones; code files, without tests.
- Who writes it: A commit counts as AI's when it carries its signature: a Co-Authored-By line, its author name or the merge of its branch.
- Activity: From GitHub and its history, on the day SeeRepo read it.
- Tests: The files that test the code, and the share of code files a test imports.

## Frequently asked questions

### Which is bigger, trivy or buildkit?

trivy, with 285,674 lines written; buildkit has 223,276.

The proof: [aquasecurity/trivy's code at commit 239be7b](https://github.com/aquasecurity/trivy/tree/239be7b2671a3c9706bbfec2ba4677210cbdcdec)

### Which has more GitHub stars, trivy or buildkit?

trivy, with 39,321 stars; buildkit has 10,418.

The proof: [aquasecurity/trivy on GitHub](https://github.com/aquasecurity/trivy)

### Which has more tests, trivy or buildkit?

trivy, with 706 test files; buildkit has 361.

The proof: [aquasecurity/trivy's code at commit 239be7b](https://github.com/aquasecurity/trivy/tree/239be7b2671a3c9706bbfec2ba4677210cbdcdec)

### Which was updated more recently, trivy or buildkit?

trivy: its last push was on November 13, 2026, and buildkit's on November 12, 2026.

The proof: [aquasecurity/trivy's commits on GitHub](https://github.com/aquasecurity/trivy/commits)

### Which has more commits signed by AI, trivy or buildkit?

trivy: an AI signed 0.5% of its commits, with Claude Code, GitHub Copilot, and Cursor; in buildkit, 0.2%.

The proof: [the commits each tool signed in aquasecurity/trivy](https://seerepo.com/r/aquasecurity/trivy/ai)

## Sources

- aquasecurity/trivy: Read on November 14, 2026, at commit 239be7b (https://github.com/aquasecurity/trivy/tree/239be7b2671a3c9706bbfec2ba4677210cbdcdec)
- moby/buildkit: Read on November 13, 2026, at commit d667ec0 (https://github.com/moby/buildkit/tree/d667ec05a024e65a79bd07c8c241adddaf30f550)

## What is your repo built with?

Any public repo, with no account: https://seerepo.com/r/owner/repo/built, with the owner and name it has on GitHub.