CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/trivy 0.76.1

Security scanner written in go

Port info

Maintainer
mfechner@FreeBSD.org
Packages
latest: 0.76.1
Upstream
up to date
Last update
to 0.76.1 · 45b6655baa
Quarterly
2026Q4: 0.75.0_1 · last MFH ec5f3a7251
WWW
https://github.com/aquasecurity/trivy
Links
cgit · VuXML

Install

Package
# pkg install trivy
installs 0.76.1 from latest; from quarterly (2026Q4) 0.75.0_1
Port
# cd /usr/ports/security/trivy && make install clean
Size
43 MiB download · 208 MiB installed
Depends on
nothing
License
APACHE20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.76.10.75.0_1–
FreeBSD 150.76.10.76.0–
FreeBSD 140.76.0_10.75.0_1✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.75.0_10.75.0–
FreeBSD 140.75.0_10.74.0_3✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.76.1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (89)

Matthias Fechner (mfechner) · 0.76.1
security/trivy: update to 0.76.1

Changes:	https://github.com/aquasecurity/trivy/releases
45b6655baa
Dag-Erling Smørgrav (des) · 0.76.0_1 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Matthias Fechner (mfechner) · 0.76.0 MFH 2026Q4 ✓
security/trivy: update to 0.76.0

Chnages:	https://github.com/aquasecurity/trivy/releases
4ba52f8637
Matthias Fechner (mfechner) · 0.75.0 MFH 2026Q4 ✓
security/trivy: update to 0.75.0

Changes:	https://github.com/aquasecurity/trivy/releases
94cf4a18eb
Adam Weinberger (adamw) · 0.74.0_2
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 0.74.0_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Matthias Fechner (mfechner) · 0.74.0
security/trivy: update to 0.74.0

Changes:	https://github.com/aquasecurity/trivy/releases
ceb3fbd428
Dag-Erling Smørgrav (des) · 0.73.0_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Matthias Fechner (mfechner) · 0.73.0 MFH 2026Q3 ✓
security/trivy: update to 0.73.0

Changes:	https://github.com/aquasecurity/trivy/releases
d03738973f
Dag-Erling Smørgrav (des) · 0.72.0_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Matthias Fechner (mfechner) · 0.72.0
security/trivy: update to 0.72.0

Changes:	https://github.com/aquasecurity/trivy/releases
ae1cea4c9b
Matthias Fechner (mfechner) · 0.71.2
security/trivy: update to 0.71.2

Changes:	https://github.com/aquasecurity/trivy/releases
e3d2ab7b24
Matthias Fechner (mfechner) · 0.71.1
security/trivy: update to 0.71.1

Changes:	https://github.com/aquasecurity/trivy/releases
f965d0f12d
Dag-Erling Smørgrav (des) · 0.71.0_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Matthias Fechner (mfechner) · 0.71.0
security/trivy: update to 0.71.0

Changes:	https://github.com/aquasecurity/trivy/releases
dfe8bdf421
Adam Weinberger (adamw) · 0.70.0_1
various: Bump ports for Go 1.25.10
4e243a83f8
Matthias Fechner (mfechner) · 0.70.0
security/trivy: update to 0.70.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.70.0
0519f1c909
Dag-Erling Smørgrav (des) · 0.69.3_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Robert Clausecker (fuz) · 0.69.3
*/*: Go ports that use modernc.org/sqlite are for aarch64, amd64 only

The module modernc.org/sqlite (and dependencies such as modernc.org/libc)
are only available on aarch64 and amd64 FreeBSD.  Other platforms are
not supported on FreeBSD right now.

Consistently mark ports using these with ONLY_FOR_ARCHS.

Approved by:	portmgr (build fix blanket)
MFH:		2026Q1
b1e7e12428
Matthias Fechner (mfechner) · 0.69.3
security/trivy: update to 0.69.3

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.69.3
963373df70
Adam Weinberger (adamw) · 0.69.2_1
various: Bump ports for Go 1.25.8
a8d318da7c
Matthias Fechner (mfechner) · 0.69.2
security/trivy: update to 0.69.2

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.69.2
92749d000d
Adam Weinberger (adamw) · 0.69.1_2
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 0.69.1_1
various: Bump Go ports for 1.24.13
529df949a5
Matthias Fechner (mfechner) · 0.69.1
security/trivy: update to 0.69.1

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.69.1
561a0da503
Matthias Fechner (mfechner) · 0.69.0
security/trivy: update to 0.69.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.69.0
d28e6fe8da
Adam Weinberger (adamw) · 0.68.2_1
various: Bump Go ports for 1.24.12
013f2d30b0
Matthias Fechner (mfechner) · 0.68.2
security/trivy: update to 0.68.2

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.68.2
edc45dc930
Matthias Fechner (mfechner) · 0.68.1
Do not pin go version

as suggested by Adam.
e09e36a4b8
Matthias Fechner (mfechner) · 0.68.1
security/trivy: update to 0.68.1

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.68.1
69c17848ec
Adam Weinberger (adamw) · 0.67.2_3
various: Bump Go ports for 1.25.5
ec872485e4
Adam Weinberger (adamw) · 0.67.2_2
various: Bump Go ports for 1.25.4
d761fa722b
Adam Weinberger (adamw) · 0.67.2_1
various: Bump go ports for go-1.25.3
d571ec94a3
Matthias Fechner (mfechner) · 0.67.2
security/trivy: update to 0.67.2

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.67.2
9952750af8
Adam Weinberger (adamw) · 0.66.0_2
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 0.66.0_1
many: Bump go ports for go-1.24.7
31a5a229a7
Matthias Fechner (mfechner) · 0.66.0
security/trivy: update to 0.66.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.66.0
8242bb5d63
Adam Weinberger (adamw) · 0.65.0_1
go ports: Bump for 1.24.6
53610681ea
Matthias Fechner (mfechner) · 0.65.0
security/trivy: mark i386 as broken

See here:
https://github.com/aquasecurity/trivy/discussions/9312
https://github.com/aquasecurity/trivy/pull/9102
1920bb8c6c
Matthias Fechner (mfechner) · 0.65.0
security/trivy: update to 0.65.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.65.0
0a5f5f3fa5
Adam Weinberger (adamw) · 0.64.1_1
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Matthias Fechner (mfechner) · 0.64.1
security/trivy: update to 0.64.1

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.64.1
e92966aeb3
Matthias Fechner (mfechner) · 0.64.0
security/trivy: update to 0.64.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.64.0
dec99480b8
Adam Weinberger (adamw) · 0.63.0_1
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Matthias Fechner (mfechner) · 0.63.0
security/trivy: update to 0.63.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.63.0
fafd07bbb7
Adam Weinberger (adamw) · 0.62.1_1
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Matthias Fechner (mfechner) · 0.62.1
security/trivy: update to 0.62.1

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.62.1
14104873f5
Matthias Fechner (mfechner) · 0.62.0
security/trivy: update to 0.62.0

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.62.0
1ce3c26df9
Matthias Fechner (mfechner) · 0.61.1
security/trivy: update to 0.61.1

Changes:	https://github.com/aquasecurity/trivy/releases/tag/v0.61.1
bd9d093c43