Vulnerability Reportaquasec/trivy:latest

aquasec/trivy:latestaquasec/trivy:0.76.1

digestsha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c

Executive Summary

Last scanned: Oct 22, 2026

Threat ScoreSAFE• The image has a high reputation score (90) and is pinned by digest, indicating immutability.• Vulnerability scanning found 0 exposed and 0 post-exploitation vulnerabilities.• The image is based on an Unknown Linux distribution.• The image is published by the popular community publisher 'aquasec'.

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (131M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. The container image passed all security checks, reporting zero exposed and zero post-exploitation vulnerabilities. Its high reputation and immutable digest further support its suitability for production environments.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.