Systems

The "systems" section covers the internal building blocks that the Trivy CLI and server share. None of them are user-facing on their own, but every scan flows through several of them.

Pages

• Scan service — pkg/scan/, the orchestrator behind trivy image/fs/repo/vm/sbom.
• fanal — pkg/fanal/, file analysis (analyzers, walkers, artifact handlers, image readers).
• Cache — pkg/cache/, blob/artifact cache with filesystem, in-memory, Redis, and remote backends.
• Database — pkg/db/ and pkg/javadb/, Trivy DB and Java DB lifecycle.
• RPC — pkg/rpc/ and rpc/, Twirp client/server.
• Plugin system — pkg/plugin/, external binary plugins.
• Module system — pkg/module/, WebAssembly module host.

How systems compose into a scan

graph LR
    subgraph CLI
      C[commands]
    end
    subgraph Scan
      S[scan service]
    end
    subgraph Inspection
      F[fanal]
    end
    subgraph Storage
      Cache[cache]
      DB[database]
    end
    subgraph Extension
      P[plugin]
      M[module]
    end
    subgraph Wire
      R[rpc]
    end
    C --> S
    S --> F
    S --> DB
    F --> Cache
    F --> M
    C --> P
    S -. client .- R
    R -. server .- S

Each system has its own page; the diagrams there go further than this overview.