compare
Clair vs Trivy
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Clair | Trivy |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 11k | 38k |
| Latest | v4.9.0 | v0.75.0 |
| Last push | 2026-09-30 | 2026-10-06 |
| Release cadence | about 151 days between releases | about 23 days between releases |
| Active contributors | 3 commit authors on the default branch in the last 90 days | not counted |
| Flags | none | none |
How they relate
Both replace Snyk. Alternatives to Snyk →
PartialClairContainer image scanning as a service behind a registry; no code or dependency scanning.
PartialTrivyScans dependencies, container images, infrastructure as code and secrets from the CLI or CI; no hosted dashboard or fix pull requests.
Clair
Clair
✓ signed The latest release, v4.9.0, carries a signature GitHub verified.
Loading the security report
Trivy
✓ signed The latest release, v0.75.0, carries a signature GitHub verified.
Loading the security report