Trivy is open-sourced by Aqua Security and, in addition to image scanning, covers scenarios such as IaC configuration files and Git repositories, and is widely adopted within the CNCF ecosystem.