awesome-alternatives

compare

OSV-Scanner vs Trivy

The same facts for both, read from GitHub every night, and the relation a person reviewed.

OSV-ScannerTrivy
LanguageGoGo
LicenceApache-2.0Apache-2.0
Stars11k38k
Latestv2.6.0v0.75.0
Last push2026-10-052026-10-06
Release cadenceabout 35 days between releasesabout 23 days between releases
Active contributors19 commit authors on the default branch in the last 90 daysnot counted
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.

    PartialTrivyScans dependencies, container images, infrastructure as code and secrets from the CLI or CI; no hosted dashboard or fix pull requests.