aquasecurity/trivy-vscode-extension

A VS Code Extension for Trivy

188

stars

commits

TypeScript

primary language

Jun 29, 2026

updated

marketplace.visualstudio.com/items?itemName=AquaSecurityOfficial.trivy-vulnerability-scanner

vscode-extension

vulnerability-scanning

README

Aqua Trivy

Trivy Vulnerability Scanner is a VS Code extension that helps you find vulnerabilities in your software projects without leaving the comfort of your VS Code window.

Documentation

Check the Documentation for all the information on using the Aqua Trivy VS Code extension.

For installing the Trivy MCP Server, see the MCP Server Setup Guide.

Known Issues

If you find one, please file a GitHub Issue here.

Feature Requests

Have a feature you desire? Please let us know by filing an issue here.

Change History

Check the Changelog for a more thorough history of changes

Contributors

32 commits

13 commits

2 commits

2 commits

Similar repos

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code…

37,872

same org

github/vscode-codeql

An extension for Visual Studio Code that adds rich language support for CodeQL

541

SonarSource/sonarlint-vscode

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in…

625

semgrep/semgrep-vscode

Semgrep extension for Visual Studio Code

DataDog/IDE-SHEPHERD-extension

A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE

118

infosec-intern/vscode-yara

VSCode extension for the YARA pattern matching language

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

1,409

same org

aquasecurity/tfsec

Tfsec is now part of Trivy

7,036

same org

Languages

TypeScript

98.1%

JavaScript

1.9%

aquasecurity/trivy-vscode-extension

A VS Code Extension for Trivy

188

stars

commits

TypeScript

primary language

Jun 29, 2026

updated

marketplace.visualstudio.com/items?itemName=AquaSecurityOfficial.trivy-vulnerability-scanner

vscode-extension

vulnerability-scanning

README

Aqua Trivy

Trivy Vulnerability Scanner is a VS Code extension that helps you find vulnerabilities in your software projects without leaving the comfort of your VS Code window.

Documentation

Check the Documentation for all the information on using the Aqua Trivy VS Code extension.

For installing the Trivy MCP Server, see the MCP Server Setup Guide.

Known Issues

If you find one, please file a GitHub Issue here.

Feature Requests

Have a feature you desire? Please let us know by filing an issue here.

Change History

Check the Changelog for a more thorough history of changes

Similar repos

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code…

37,872

same org

github/vscode-codeql

An extension for Visual Studio Code that adds rich language support for CodeQL

541

SonarSource/sonarlint-vscode

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in…

625

semgrep/semgrep-vscode

Semgrep extension for Visual Studio Code

DataDog/IDE-SHEPHERD-extension

A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE

118

infosec-intern/vscode-yara

VSCode extension for the YARA pattern matching language

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

1,409

same org

aquasecurity/tfsec

Tfsec is now part of Trivy

7,036

same org

Contributors

32 commits

13 commits

2 commits

2 commits

Languages

TypeScript

98.1%

JavaScript

1.9%