notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
After the ports freeze to fix some stuff, the freeze is over. I have some work to do before FreshPorts can start processing commits again before it can start processing again. I've created an issue for that.
Port details on branch 2026Q2
trivy Security scanner written in go
0.71.2 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.73.0_2Version of this port present on the latest quarterly branch.
Maintainer: mfechner@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-04-10 17:07:00
Last Update: 2026-06-30 05:41:26
Commit Hash: d3f0aad
License: APACHE20
WWW:
https://github.com/aquasecurity/trivy
Description:
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/trivy
  2. /usr/local/share/licenses/trivy-0.71.2/catalog.mk
  3. /usr/local/share/licenses/trivy-0.71.2/LICENSE
  4. /usr/local/share/licenses/trivy-0.71.2/APACHE20
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • trivy>0:security/trivy
To install the port:
cd /usr/ports/security/trivy/ && make install clean
To add the package, run one of these commands:
  • pkg install security/trivy
  • pkg install trivy
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: trivy
Flavors: there is no flavor information for this port.
ONLY_FOR_ARCHS: aarch64 amd64
distinfo:
TIMESTAMP = 1782199709 SHA256 (go/security_trivy/aquasecurity-trivy-v0.71.2_GH0/go.mod) = b7ad9fde4a4bf7b041ce03822443d82f6f03c6b896064325277975f75e298bd3 SIZE (go/security_trivy/aquasecurity-trivy-v0.71.2_GH0/go.mod) = 26305

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_trivy/aquasecurity-trivy-v0.71.2_GH0/aquasecurity-trivy-v0.71.2_GH0.tar.gz) = a4f4187644f6bdfba393c3c194b9ef8acc3891933c6faeeac8715a057db33785 SIZE (go/security_trivy/aquasecurity-trivy-v0.71.2_GH0/aquasecurity-trivy-v0.71.2_GH0.tar.gz) = 56610624

Collapse this list.

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go125 : lang/go125
Fetch dependencies:
  1. go125 : lang/go125
There are no ports dependent upon this port
Configuration Options:
No options to configure
Options name:
security_trivy
USES:
go:modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://codeload.github.com/aquasecurity/trivy/tar.gz/v0.71.2?dummy=/
  2. https://raw.githubusercontent.com/aquasecurity/trivy/v0.71.2/
Collapse this list.

Number of commits found: 7

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.71.2
30 Jun 2026 05:41:26
commit hash: d3f0aad2dc6ee61d34f6fdd15d6ad288049bee1ecommit hash: d3f0aad2dc6ee61d34f6fdd15d6ad288049bee1ecommit hash: d3f0aad2dc6ee61d34f6fdd15d6ad288049bee1ecommit hash: d3f0aad2dc6ee61d34f6fdd15d6ad288049bee1e files touched by this commit		 Matthias Fechner (mfechner) search for other commits by this committer 
security/trivy: update to 0.71.2

Changes:	https://github.com/aquasecurity/trivy/releases
(cherry picked from commit e3d2ab7b242dc1bc7032a24294e90c230bd09a86)
0.71.1
30 Jun 2026 05:36:26
commit hash: 7fe495a7f48096a8decb67d0add58dd73d25d239commit hash: 7fe495a7f48096a8decb67d0add58dd73d25d239commit hash: 7fe495a7f48096a8decb67d0add58dd73d25d239commit hash: 7fe495a7f48096a8decb67d0add58dd73d25d239 files touched by this commit		 Matthias Fechner (mfechner) search for other commits by this committer 
security/trivy: update to 0.71.1

Changes:	https://github.com/aquasecurity/trivy/releases
(cherry picked from commit f965d0f12dc25bd80efa3b719b878ddcc502779f)
0.71.0
06 Jun 2026 05:41:23
commit hash: 1a9dbc07598cbccb5339bcea143b3860b3e61713commit hash: 1a9dbc07598cbccb5339bcea143b3860b3e61713commit hash: 1a9dbc07598cbccb5339bcea143b3860b3e61713commit hash: 1a9dbc07598cbccb5339bcea143b3860b3e61713 files touched by this commit		 Matthias Fechner (mfechner) search for other commits by this committer 
security/trivy: update to 0.71.0

Changes:	https://github.com/aquasecurity/trivy/releases
(cherry picked from commit dfe8bdf42184160bed289ea0213b4cc994b2ea5f)
0.70.0_2
03 Jun 2026 18:00:48
commit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239c files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.11 / go-1.26.4
0.70.0_1
09 May 2026 17:30:33
commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654 files touched by this commit		 Adam Weinberger (adamw) search for other commits by this committer 
various: Bump ports for Go 1.25.10
0.70.0
24 Apr 2026 09:35:49
commit hash: 025aa4651a31b3d76cde5d8c22e5462930609fd5commit hash: 025aa4651a31b3d76cde5d8c22e5462930609fd5commit hash: 025aa4651a31b3d76cde5d8c22e5462930609fd5commit hash: 025aa4651a31b3d76cde5d8c22e5462930609fd5 files touched by this commit		 Matthias Fechner (mfechner) search for other commits by this committer 
security/trivy: update to 0.70.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.70.0
(cherry picked from commit 0519f1c90909612c8548a2acd726fcd76c68dbe1)
0.69.3_1
10 Apr 2026 16:19:03
commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.9 / 1.26.2

Number of commits found: 7
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
electron42Sep 03
libnjsSep 03
nginx-fullSep 03
nginx-module-njsSep 03
njsSep 03
chromiumSep 02
jenkinsSep 02
jenkins-ltsSep 02
py-dj60-strawberry-graphqlSep 02
py-strawberry-graphqlSep 02
ungoogled-chromiumSep 02
erlangSep 01
erlangSep 01
erlang-runtime27Sep 01
erlang-runtime27Sep 01

30 vulnerabilities affecting 415 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-09-03 17:10:13 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 35095
Broken 77
Deprecated 318
Ignore 190
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 44
Expired 16
Set to expire 241
Interactive 0
new 24 hours 8
new 48 hours12
new 7 days31
new fortnight74
new month191
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.