notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details on branch 2026Q3
trivy Security scanner written in go
0.72.0_1 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.72.0_1Version of this port present on the latest quarterly branch.
Maintainer: mfechner@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-07-10 08:24:41
Last Update: 2026-07-10 08:00:52
Commit Hash: c328c3d
License: APACHE20
WWW:
https://github.com/aquasecurity/trivy
Description:
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/trivy
  2. /usr/local/share/licenses/trivy-0.72.0_1/catalog.mk
  3. /usr/local/share/licenses/trivy-0.72.0_1/LICENSE
  4. /usr/local/share/licenses/trivy-0.72.0_1/APACHE20
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • trivy>0:security/trivy
To install the port:
cd /usr/ports/security/trivy/ && make install clean
To add the package, run one of these commands:
  • pkg install security/trivy
  • pkg install trivy
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: trivy
Flavors: there is no flavor information for this port.
ONLY_FOR_ARCHS: aarch64 amd64
distinfo:
TIMESTAMP = 1782879997 SHA256 (go/security_trivy/aquasecurity-trivy-v0.72.0_GH0/go.mod) = 4f1207875bb6102121cba9871f7da8af158096e6fff0759a3a37adf1beea7d24 SIZE (go/security_trivy/aquasecurity-trivy-v0.72.0_GH0/go.mod) = 26806

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_trivy/aquasecurity-trivy-v0.72.0_GH0/aquasecurity-trivy-v0.72.0_GH0.tar.gz) = 2c6e0e5a4b1b08241aab8e379155dfb31855a50cb1d04fa790039cf3010477cf SIZE (go/security_trivy/aquasecurity-trivy-v0.72.0_GH0/aquasecurity-trivy-v0.72.0_GH0.tar.gz) = 56629523

Collapse this list.

Packages (timestamps in pop-ups are UTC):
trivy
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest0.70.00.70.0---n/an/an/a
FreeBSD:13:quarterly0.69.3_10.70.0---n/an/an/a
FreeBSD:14:latest0.72.00.72.0_1------
FreeBSD:14:quarterly0.72.00.72.0_1------
FreeBSD:15:latest0.72.0_10.72.0_1n/a-n/an/a--
FreeBSD:15:quarterly0.72.00.72.0_1n/a-n/an/a--
FreeBSD:16:latest0.72.00.72.0_1n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go125 : lang/go125
Fetch dependencies:
  1. go125 : lang/go125
There are no ports dependent upon this port
Configuration Options:
No options to configure
Options name:
security_trivy
USES:
go:modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://codeload.github.com/aquasecurity/trivy/tar.gz/v0.72.0?dummy=/
  2. https://raw.githubusercontent.com/aquasecurity/trivy/v0.72.0/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.72.0_1
10 Jul 2026 08:00:52
commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.12 / 1.26.5

Number of commits found: 1
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
ocaml-opamJul 14
popplerJul 14
poppler-glibJul 14
poppler-qt5Jul 14
poppler-qt6Jul 14
poppler-utilsJul 14
apache-commons-httpclientJul 10
apache-commons-httpclientJul 10
httpclientJul 10
gitlabJul 09
mailpitJul 09
libXfont2Jul 08
xorg-serverJul 08
xwaylandJul 08
emacsJul 06

22 vulnerabilities affecting 316 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-07-14 15:58:40 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34891
Broken 89
Deprecated 294
Ignore 205
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 45
Expired 19
Set to expire 218
Interactive 0
new 24 hours 20
new 48 hours36
new 7 days144
new fortnight300
new month453
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.