Supported distributions for Linux host scan are:
| Distribution | Supported Versions |
|---|---|
| Red Hat Enterprise Linux | 6, 7, 8, 9 |
| CentOS | 7, 8 |
| Amazon Linux | 2, 2022, 2023 |
| Debian | 9, 10, 11 |
| Ubuntu | 14, 16, 18, 20, 22 |
| Oracle Linux | 6, 7, 8 |
| Rocky Linux | 8 |
| AlmaLinux OS | 8 |
| Fedora Linux | 32, 33, 34, 35 |
| openSUSE | tumbleweed |
| openSUSE Leap | 15.2, 15.3 |
| SUSE Enterprise | 11 12 15 |
Only x86 and ARM CPUs are supported.
Vulnerabilities published during extended update support periods
The status of extended support is as follows:
Supported distributions for Linux paste scan are:
| Distribution | Supported Versions |
|---|---|
| Red Hat Enterprise Linux | 6, 7, 8, 9 |
| CentOS | 7, 8 |
| Amazon Linux | 2, 2022, 2023 |
| Debian | 9, 10, 11 |
| Ubuntu | 16, 18, 20 |
| Rocky Linux | 8 |
| AlmaLinux OS | 8 |
| Fedora Linux | 32, 33, 34, 35 |
| openSUSE | tumbleweed |
| openSUSE Leap | 15.2, 15.3 |
| SUSE Enterprise | 11 12 15 |
Supported distributions for Windows host scan are:
| Distribution | Supported Versions |
|---|---|
| Windows Server | 2016, 2019, 2022 |
| Windows | 10, 11 |
Supported distributions for Windows paste scan are:
| Distribution | Supported Versions |
|---|---|
| Windows Server | 2016, 2019, 2022 |
| Windows | 10, 11 |
Please refer to trivy’s documentation for supported distributions for Docker scan (Trivy).
Also, for the regular version of How to install Trivy and scan in a local environment, the following OSes are the only environments that can be set up:
Refer to the ECR and GCR documentation.
Supported by Lockfile Paste Scan.
| Lang | lockfile | Dev dependencies |
|---|---|---|
| Ruby | Gemfile.lock | included |
| Python | Pipfile.lock poetry.lock, requirements.txt | excluded included |
| PHP | composer.lock | excluded |
| Node.js | package-lock.json yarn.lock | excluded included |
| .NET | packages.lock.json | included |
| Go | go.sum | included |
| Rust | Cargo.lock | included |
| C / C++ | conan.lock | excluded |
| Java | - | - |
Supported by Vuls Scanner Scan with Lockfile Specified.
| Lang | File | Dev dependencies |
|---|---|---|
| Ruby | Gemfile.lock | included |
| Python | Pipfile.lock poetry.lock, requirements.txt | excluded included |
| PHP | composer.lock | excluded |
| Node.js | package-lock.json yarn.lock | excluded included |
| .NET | packages.lock.json | included |
| Go | go.sum Go binary | included excluded |
| Rust | Cargo.lock | included |
| C / C++ | conan.lock | excluded |
| Java | pom.xml, gradle.lockfile jar, war, ear, par | excluded included |
Refer to trivy documentation for supported languages of Trivy Scan with Filesystem Path Specified.
In addition, the How to Install Trivy and Scan in Local Environment normal version can be set up only on the following OS:
FutureVuls Screen for Registering CPE detects products registered with NVD and JVN.
WordPress Scan targets WordPress Core, plugins, and themes supported by wpscan.com.