Chainguard

Trivy supports the following scanners for OS packages.

Scanner	Supported
SBOM	✓
Vulnerability	✓
License	✓

The table below outlines the features offered by Trivy.

Feature	Supported
Detect unfixed vulnerabilities	-
Dependency graph	✓
End of life awareness	-

SBOM

Same as Alpine Linux.

Vulnerability

Chainguard offers its own security advisories, and these are utilized when scanning Chainguard for vulnerabilities. Everything else is the same as Alpine Linux.

Data Source

See here.

License

Same as Alpine Linux.