Reading the repo — stats and the shipped feed land in about ten seconds…
Dead heat on popularity and shipping momentum. Stats only — numbers straight from GitHub, no AI verdict.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
| Metric | trivy | trufflehog |
|---|---|---|
| Stars | 36.9k | 27.0k |
| Forks | 531 | 2.5k |
| Shipped last 4 weeks | 32 | 41 |
| Commits last year | 522 | 371 |
| Days since last push | today | today |
| Lines of code (est.) | 236.3k | 384.2k |
| Open issues | 230 | 495 |
| Languages | 6 | 6 |
Highlighted cells win their row. Size rows (lines of code, open issues, languages) are facts, not victories — nobody wins those. Shipping counts come from GitHub's weekly participation stats and show “—” while GitHub warms that cache.
Trivy's stardom vs. Trufflehog's momentum
aquasecurity/trivy dominates on prestige with 36.8k stars and steady annual commits (522), but trufflesecurity/trufflehog is shipping hotter right now—41 releases in four weeks plus a commanding 2.5k forks showing serious adoption velocity. It's a classic popularity-versus-momentum split: Trivy owns mindshare, Trufflehog owns the sprint.
AI-generated from the stats below.