Aqua Security
@aquasecurity • Next-generation cloud native security. Use this route to separate flagship concentration from portfolio breadth before you treat a publisher as broadly strong.
Portfolio concentration
73%
Top three share
Shows whether the organization is driven by one breakout repo or several visible projects.
Breadth
30 repos
Visible snapshot
9 repositories updated in the last 90 days.
Leading language
Unknown
Portfolio mix
Unknown (12), Go (10), HCL (3)
Average size
20
Stars per repository
Useful for distinguishing one flagship-heavy publisher from a repeatable portfolio.
Updated: 2026-06-30(33d ago)GitHub API fallback30 repositories
73%
of the visible star count comes from this organization's top three repositories.
20
stars per repository in this same snapshot.
Unknown
is the most common language here, with 9 repositories updated in the last 90 days.
Why this rank
This organization stands out because one flagship repo drives 52% of its visible star count.
Flagship share 52%Breakout repo: traceeshark
Organization pages work best when you separate portfolio breadth from flagship concentration. In Aqua Security's case, the visible top three repositories account for about 73% of total stars in this snapshot, which helps explain whether the organization is known for one breakout project or for a broader repeatable portfolio.
The dominant language mix here is Unknown (12), Go (10), HCL (3). That makes this page useful not just for popularity checks, but also for seeing what technical shape an organization's public ecosystem actually has.
Top Repositories
| # | Repository | Language | Stars |
|---|---|---|---|
| 1 | aquasecurity/traceeshark Deep Linux runtime visibility meets Wireshark | C | 310 |
| 2 | aquasecurity/trivy-checks | Open Policy Agent | 81 |
| 3 | aquasecurity/trivy-mcp Trivy plugin for starting an MCP server | Go | 45 |
| 4 | aquasecurity/trivy-aws | Go | 25 |
| 5 | aquasecurity/vuln-list-nvd NVD | 15 | |
| 6 | aquasecurity/vuln-list-redhat Red Hat security advisories | 15 | |
| 7 | aquasecurity/setup-trivy Set up your GitHub Actions workflow with a specific version of Trivy | 14 | |
| 8 | aquasecurity/trivy-iac | Go | 12 |
| 9 | aquasecurity/vuln-list-debian Debian Security Tracker | 10 | |
| 10 | aquasecurity/terraform-gcp-onboarding Terraform module to configure Aqua Security’s CSPM and agentless solutions on GCP | HCL | 9 |
| 11 | aquasecurity/gobard Unofficial Golang API for Bard Chat. | Go | 9 |
| 12 | aquasecurity/terraform-aws-onboarding Terraform module to configure Aqua Security’s CSPM and agentless solutions on AWS | HCL | 8 |
| 13 | aquasecurity/vex-repo-spec VEX Repository Specification | 7 | |
| 14 | aquasecurity/vexhub-crawler Collect VEX documents and update VEX Hub | Go | 7 |
| 15 | aquasecurity/terraform-azure-onboarding Terraform module to configure Aqua Security’s CSPM and agentless solutions on Azure | HCL | 6 |
| 16 | aquasecurity/trivy-plugin-index Plugin index for Trivy. This repo is for plugin maintainers. | Go | 6 |
| 17 | aquasecurity/vuln-list-aqua Security advisories from Aqua Security | 5 | |
| 18 | aquasecurity/trivy-plugin-count Example of Trivy output plugin | Go | 5 |
| 19 | aquasecurity/leaky-repo Benchmarking repo for secrets scanning | Python | 3 |
| 20 | aquasecurity/resources Various resources about Aqua and it's products | 3 | |
| 21 | aquasecurity/trivy-schemas | HTML | 2 |
| 22 | aquasecurity/pipeline-parser | Go | 1 |
| 23 | aquasecurity/false-positives-reporting A repository to report false positives from SAST or secrets scanning tools, helping improve scan accuracy and relevance for Aqua enterprise only | 1 | |
| 24 | aquasecurity/trivy-plugin-template Template for Trivy plugins | Go | 1 |
| 25 | aquasecurity/vuln-list-k8s k8s vulnerability advisory | 1 | |
| 26 | aquasecurity/vuln-list-suse | 0 | |
| 27 | aquasecurity/trivy-release-test Release Testing | Go | 0 |
| 28 | aquasecurity/trivy-test-repo Test repository used in Trivy | 0 | |
| 29 | aquasecurity/trivy-chocolatey Repository for storing Trivy chocolatey deployment config | Shell | 0 |
| 30 | aquasecurity/vuln-list-reserve Temporal repository while vuln-list is down | 0 |
Next step after the organization read
Open a flagship repository, compare a couple of portfolio leaders, or return to the organization map when you want a broader concentration read.
Learn and methodology
Keep trust-building context reachable, but behind the first data read instead of ahead of it.
How to read this organization snapshot
Total stars are useful as a discovery signal, but they do not tell you whether a team maintains every repository equally. Pair this page with release cadence, maintainer activity, and the flagship concentration shown above before making adoption decisions.
For broader background on GitStar's ranking logic and editorial guidance, see Methodology & Editorial Standards.