Tools/Trivy
Trivy
Aqua Security's open-source scanner covering containers, filesystems, git repos, and IaC in a single binary — CVE scanning, misconfiguration detection, and secret scanning combined. Closest open-source equivalent to AWS_Inspector, and broader in scope (Inspector is CVE-only across EC2/ECR/Lambda; Trivy adds IaC and secrets). Overlaps with Snyk and AQUA's SCA coverage but runs anywhere — cloud pipeline or fully offline/on-prem — with no vendor backend required. Grype is a common lighter-weight alternative for pure container/filesystem CVE scanning.