Bottlerocket¶
Trivy supports the following scanners for OS packages.
| Scanner | Supported |
|---|---|
| SBOM | ✓ |
| Vulnerability | ✓ |
| License | - |
Please see here for supported versions.
The table below outlines the features offered by Trivy.
| Feature | Supported |
|---|---|
| End of life awareness | - |
SBOM¶
Trivy detects packages that are listed in the software inventory.
Vulnerability¶
Trivy checks for vulnerabilities using the Bottlerocket security advisories, comparing installed package versions from the software inventory against known fixed versions.