Google Distroless Images¶
Trivy supports the following scanners for OS packages.
| Scanner | Supported |
|---|---|
| SBOM | ✓ |
| Vulnerability | ✓ |
| License | ✓ |
Please see here for supported versions.
The table below outlines the features offered by Trivy.
| Feature | Supported |
|---|---|
| Unfixed vulnerabilities | - |
| Dependency graph | ✓ |
| End of life awareness | - |
SBOM¶
Trivy detects packages pre-installed in distroless images.
Vulnerability¶
Google Distroless is based on Debian; see there for details.
License¶
Google Distroless is based on Debian; see there for details.