Skip to content

Reporting

DefectDojo (Community)

DefectDojo can parse Trivy JSON reports. The parser supports deduplication and auto-close features.

👉 Get it at: https://github.com/DefectDojo/django-DefectDojo

PerspectiveGraph (Community)

PerspectiveGraph ingests vulnerability reports in JSON format generated by Trivy, correlating the images, libraries, and CVEs they contain with cloud, Kubernetes, and IAM data to identify vulnerabilities that can be exploited along a path from the Internet to a sensitive asset. It is also able to report this path directly from the pull request that introduced the vulnerability.

👉 Get it at: https://github.com/luiacuaniello/perspectivegraph

SecObserve (Community)

SecObserve can parse Trivy results as CycloneDX reports and provides an unified overview of vulnerabilities from different sources. Vulnerabilities can be evaluated with manual and rule based assessments.

👉 Get it at: https://github.com/SecObserve/SecObserve

Scan2html (Community)

A Trivy plugin that scans and outputs the results to an interactive html file.

👉 Get it at: https://github.com/fatihtokus/scan2html

SonarQube (Community)

A Trivy plugin that converts JSON report to SonarQube generic issues format.

👉 Get it at: https://github.com/umax/trivy-plugin-sonarqube

Trivy-Streamlit (Community)

Trivy-Streamlit is a Streamlit application that allows you to quickly parse the results from a Trivy JSON report.

👉 Get it at: https://github.com/mfreeman451/trivy-streamlit

Trivy-Vulnerability-Explorer (Community)

This project is a web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive data table.

👉 Get it at: https://github.com/dbsystel/trivy-vulnerability-explorer

plopsec.com (Community)

This project is a web application designed to help you visualize Trivy image scan reports. It enriches the data with additional exploitability metrics from EPSS, Metasploit, and Exploit-DB, updated daily.

👉 Get it at: https://plopsec.com | https://github.com/pl0psec/plopsec.com