About Trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Trivy 0.76.1
Trivy is a comprehensive and versatile security scanner.
- By Aqua Security Software
- Open Source
- Updated Oct 21, 2026
What's new in 0.76.1
🔐 Security update：eMudhra CA incident 🛡️
Trivy v0.76.1 includes mitigations for the eMudhra intermediate CA key compromise.
- Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as CVE-2026-111943.
- Official container images include an updated Alpine CA trust store that rejects the affected certificate chains.
We recommend upgrading to v0.76.1 and redeploying container images to apply these updates. If you build Trivy from source, use Go 1.27.3 or later and keep your runtime CA trust store up to date.
Changelog
- e713f67f7d54decdcd9b3132c9751833dcced698 release：v0.76.1 [release/v0.76] (#11445)
- 6647bd6ec5924087956285b773b8cae10508736e fix(deps)：bump the aws group across 1 directory with 6 updates [backport: release/v0.76] (#11446)
- e0964c97819b1d6a45b7e0426803745f173fc550 fix(deps)：bump the docker group with 3 updates [backport: release/v0.76] (#11443)
- 992c360c33d9f9627bb24c1fe3f20815110c88e5 fix(deps)：bump the common group with 3 updates [backport: release/v0.76] (#11442)
Technical details
| Publisher | Aqua Security Software |
|---|---|
| Version | 0.76.1 |
| Release date | 2026-10-21 |
| License | Apache-2.0 |
| Installer type | zip |
| Architecture | x64 |
| Package ID | AquaSecurity.Trivy |
Links & install command
Install Trivy from the command line with Windows Package Manager (winget):
winget install --id=AquaSecurity.Trivy -eOlder versions
- 0.76.0
- 0.75.0
- 0.74.0
- 0.73.0
- 0.72.0
- 0.71.2
- 0.71.1
- 0.71.0
- 0.70.0
Related software
Java Runtime Environment 32-bit 8-update-341
Java runtime essentials for older systems
Java Runtime Environment 64-bit 8-update-351
Java runtime in the modern software stack
Arduino Builder 1.0.13
Arduino Builder is a standalone utility for viewing, compiling and uploading Arduino sketch files and compiled ELF or HEX files to Arduino boards with the Arduino serial programming interface, Arduino ISP or USBasp, without the need for the Arduino IDE. The app has a standard user interface with drop down menus to choose the data you need. The functions of the utility can be undertaken in 3 steps. When compiling is required, for uploading sketch file, Arduino Builder scans the sketch for referenced libraries and then builds the necessary libraries automatically. The distribution package contains Arduino 1.0.4 core and library files, AVR GCC compiler toolchain and AVRDUDE. Please be aware that as only the standard Arduino libraries are shipped with the utility, if you want to build with custom libraries, then you will need to place the library source code files with the identical directory name into /arduino/libraries directory.
Git 2.56.0.3
A free and open source distributed version control system
HashiCorp Terraform 1.16.6
A tool for building, changing, and versioning infrastructure safely and efficiently.
Docker Desktop 4.97.0
Free development tool app
ChromeDriver 156.0.8078.47
Essential tool for automated browser testing
Helm 4.3.1
The Package Manager for Kubernetes