# Vulnerability Scanning

This section describes the details of vulnerability scanning.
Trivy detects known vulnerabilities according to the versions of installed packages.

The following packages are supported.

- [OS packages](detection/os.md)
- [Language-specific packages](detection/language.md)

Trivy downloads [the vulnerabillity database](https://github.com/aquasecurity/trivy-db) every 6 hours.
The data source is listed [here](detection/data-source.md).