Google Distroless Images

Trivy supports the following scanners for OS packages.

Scanner	Supported
SBOM	✓
Vulnerability	✓
License	✓

Please see here for supported versions.

The table below outlines the features offered by Trivy.

Feature	Supported
Unfixed vulnerabilities	-
Dependency graph	✓
End of life awareness	-

SBOM

Trivy detects packages pre-installed in distroless images.

Vulnerability

Google Distroless is based on Debian; see there for details.

License

Google Distroless is based on Debian; see there for details.