Trivy

Trivy is a comprehensive open-source security scanner designed to detect vulnerabilities, misconfigurations, secrets, and security issues in container images, filesystems, Git repositories, and infrastructure as code. It serves as a critical tool for DevSecOps teams, security engineers, compliance officers, and developers who need to identify and remediate security vulnerabilities across their software supply chain and deployment artifacts.

Category	Vulnerability management
Direction	Query source
Sign-in	No Authentication
Query languages	SQLite
Tables	7
Query templates	39
Website	trivy.dev

Before you start

Trivy needs no credentials — Huntbase queries it without signing in.

Connect Trivy

1. Go to Connections and click New connection, or click New connection on the Trivy product page.
2. On Product, pick Trivy and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings

Where your Trivy lives:

Field	Required	Notes
Container Images	No	Container images to scan by default, such as ubuntu:latest.
File System Paths	No	File system paths to scan by default. Each must be a full path.
Cache Directory	No

Credentials

The only Method is No Authentication. Enter a Credential label (for example Production), then fill in:

No fields — choose this method to connect without credentials.

Query it

Once connected, Trivy can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 7 tables listed below, alongside every other connected source.

Example: SQLite

Scan all configured targets for secrets — Scan all defined targets for potential secrets, enabling a comprehensive security assessment and proactive mitigation of potential risks.

select
  *
from
  trivy_scan_secret;

Trivy ships with 39 query templates. Find them in Library › Queries — see Query templates.

Tables

Trivy adds 7 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 7 tables

Table	Contains
trivy_advisory	Advisories detail the vulnerabilities affecting specific operating systems and packages.
trivy_data_source	Data sources for advisory and vulnerability definitions.
trivy_scan_artifact	Container image and filesystem artifacts being scanned.
trivy_scan_package	Scan files and images for OS and language package versions.
trivy_scan_secret	Scan files and images for secrets.
trivy_scan_vulnerability	Scan files and container images for vulnerabilities.
trivy_vulnerability	Vulnerability definitions used by Trivy when scanning.

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog