# Trivy Operator

**Canonical:** https://apis.io/apis/trivy/trivy-operator/  
**Provider:** Trivy — https://apis.io/providers/trivy/  
**Base URL:** https://kubernetes.default.svc  
**Documentation:** https://github.com/aquasecurity/trivy-operator

Trivy Operator is one of 4 APIs that [Trivy](https://apis.io/providers/trivy/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Kubernetes, Security, CRD, Operator, and Vulnerability Scanning. The published artifact set on APIs.io includes API documentation and a GitHub repository.

The Trivy Operator is a Kubernetes-native security toolkit that automatically scans clusters and generates security reports as Kubernetes Custom Resources. It defines 12 CRDs covering vulnerability reports, config audit reports, exposed secret reports, SBOM reports, RBAC assessment reports, infrastructure assessment reports, and compliance reports.

## Machine-readable artifacts (15)

- **Documentation** — https://aquasecurity.github.io/trivy-operator/
- **GitHubRepository** — https://github.com/aquasecurity/trivy-operator
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_vulnerabilityreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_configauditreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_exposedsecretreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_sbomreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clustercompliancereports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clusterconfigauditreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clusterinfraassessmentreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clusterrbacassessmentreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clustersbomreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_clustervulnerabilityreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_infraassessmentreports.yaml
- **KubernetesCRD** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/crd/aquasecurity.github.io_rbacassessmentreports.yaml
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/trivy/refs/heads/main/apis.yml

## Other Trivy APIs (3)

- [Trivy CLI](https://apis.io/apis/trivy/trivy-cli/)
- [Trivy Health API](https://apis.io/apis/trivy/trivy-health-api/)
- [Trivy Server API](https://apis.io/apis/trivy/trivy-server-api/)

## Tags

Kubernetes, Security, CRD, Operator, Vulnerability Scanning

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/trivy/trivy-operator/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/trivy/.