diff --git a/projects/aquasecurity.github.io/trivy/package.yml b/projects/aquasecurity.github.io/trivy/package.yml
new file mode 100644
index 00000000..e23c8125
--- /dev/null
+++ b/projects/aquasecurity.github.io/trivy/package.yml
@@ -0,0 +1,36 @@
+distributable:
+  url: git+https://github.com/aquasecurity/trivy.git
+  ref: ${{version.tag}}
+
+versions:
+  github: aquasecurity/trivy
+
+dependencies:
+  curl.se/ca-certs: '*'
+
+build:
+  dependencies:
+    go.dev: '>=1.21'
+    linux:
+      # running gcc failed: exit status 1
+      gnu.org/gcc: '*'
+  script:
+    - go build $ARGS -ldflags="$LDFLAGS" ./cmd/trivy
+  env:
+    ARGS:
+      - -trimpath
+      - -o={{prefix}}/bin/trivy
+    LDFLAGS:
+      - -s
+      - -w
+      - -X github.com/aquasecurity/trivy/pkg/version.ver={{version}}
+    linux:
+      LDFLAGS:
+        - -buildmode=pie
+
+provides:
+  - bin/trivy
+
+test:
+  - trivy image alpine:3.10
+  - trivy --version | grep {{version}}