Trivy

by Aqua Security Softwarev0.72.0

Last updated Jul 27, 2026

Trivy is a comprehensive and versatile security scanner.

Install with winget

$ winget install --id AquaSecurity.Trivy --exact --version 0.72.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For IT teams

Deploy this app to your whole fleet with Pckgr RMM.

App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.

Free for up to 5 devices.

About

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Installers · v0.72.0

Architecture	Type	Scope	Install	Download
x64	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for Trivy.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

O
Ollama (Portable)Ollama
Ollama.Ollama.Portablev0.20.2
Start building with open models.
R
rtkrtk-ai
rtk-ai.rtkv0.44.0
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
C
Codex CLIOpenAI, Inc.
OpenAI.Codexv0.145.0
Codex CLI is an open‑source local coding agent that runs in your terminal, letting you write, edit, and understand code without leaving the command line.
R
RipGrep MSVCBurntSushi
BurntSushi.ripgrep.MSVCv15.2.0
ripgrep recursively searches directories for a regex pattern while respecting your gitignore
AWS Command Line InterfaceAmazon Web Services
Amazon.AWSCLIv2.36.9
Universal Command Line Interface for Amazon Web Services
C
CloudflareSpeedTestXIU2
XIU2.CloudflareSpeedTestv2.3.5
国外很多网站都在使用 Cloudflare CDN，但分配给中国内地访客的 IP 并不友好（延迟高、丢包多、速度慢）。虽然 Cloudflare 公开了所有 IP 段，但想要在这么多 IP 中找到适合自己的，怕是要累死，于是就有了这个软件。

More from Aqua Security Software or browse cli, containers, devops-tools.

Frequently asked questions

How do I install Trivy on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id AquaSecurity.Trivy --exact --version 0.72.0. winget downloads the installer from Aqua Security Software and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install Trivy silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id AquaSecurity.Trivy --exact 0.72.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall Trivy via winget?

Run: winget uninstall --id AquaSecurity.Trivy --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Trivy's Apps & Features entry.

Is Trivy free?

Trivy is distributed under Apache-2.0. Refer to the publisher (https://aquasecurity.github.io/trivy) for the full license terms - Wingetly itself does not charge for installation.

Does Trivy work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Trivy directly from the publisher.

How do I keep Trivy up to date?

Run winget upgrade --id AquaSecurity.Trivy --exact, or winget upgrade --all to update everything winget tracks. We index 7 versions of Trivy from microsoft/winget-pkgs.

Recent versions

0.72.0latest
0.71.2
0.71.1
0.71.0
0.70.0
0.69.3
0.69.2