Trivy — #1 Alternative to Snyk
All-in-one open-source vulnerability, IaC misconfiguration, secret, and SBOM scanner
Maintained by Aqua Security, Trivy scans container images, OS packages, language lockfiles, Terraform/Kubernetes YAML, and exposed secrets in a single fast Go binary with native GitHub Action and K8s operator integrations.
License: Apache-2.0 · Pricing: Free & Open Source · Compare all Snyk alternatives · Official Website