Open source repo

What's inside aquasecurity/trivy

aquasecurity/trivy is a Go repo with 282,031 lines written in 954 files. trivy is built with net/http and uses Redis and GitHub. AI signed 0.4% of the 4,275 commits of trivy.

Its description on GitHub: “Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more”

GoApache-2.038,881

Read on October 31, 2026, at commit e2c05f7.

What the card proved: what it’s built with on the left, what it uses on the right.

See each one with its proof

Its folders

TechnologiesWhat is trivy built with?trivy is built with net/http and uses Redis and GitHub.Who writes itHow much of trivy did AI write?0.4%AI signed 0.4% of the 4,275 commits of trivy.

In figures

lines written: 282,031; The ones people and agents wrote: product, tests, schemas and tooling. Generated code doesn’t count.
files: 954; The product’s, not counting tests.
test files: 704; The files that test the code.
technologies: 3; Each one with the file and line that prove it.

SeeRepo read its code facts-only: no AI, and none of its code is kept.

Frequently asked questions

What is aquasecurity/trivy?

aquasecurity/trivy is a Go repo with 282,031 lines written in 954 files. Its description on GitHub: “Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more”

The proof: its page on GitHub

What is trivy built with?

trivy is built with net/http and uses Redis and GitHub.

The proof: each technology with its file and line

How much of trivy did AI write?

AI signed 0.4% of the 4,275 commits of trivy.

The proof: the commits each tool signed

What license does trivy have?

trivy is released under the Apache-2.0 license.

The proof: its page on GitHub

How many stars does trivy have on GitHub?

trivy had 38,881 stars on GitHub on October 31, 2026.