diff --git a/pkgs/aquasecurity/trivy/pkg.yaml b/pkgs/aquasecurity/trivy/pkg.yaml
index 76fa4800e24..cc9a3d056f9 100644
--- a/pkgs/aquasecurity/trivy/pkg.yaml
+++ b/pkgs/aquasecurity/trivy/pkg.yaml
@@ -1,5 +1,7 @@
 packages:
-  - name: aquasecurity/trivy@v0.67.2
+  - name: aquasecurity/trivy@v0.68.1
+  - name: aquasecurity/trivy
+    version: v0.67.2
   - name: aquasecurity/trivy
     version: v0.35.0
   - name: aquasecurity/trivy
diff --git a/pkgs/aquasecurity/trivy/registry.yaml b/pkgs/aquasecurity/trivy/registry.yaml
index 1b5cff98182..4f35e724281 100644
--- a/pkgs/aquasecurity/trivy/registry.yaml
+++ b/pkgs/aquasecurity/trivy/registry.yaml
@@ -104,7 +104,7 @@ packages:
         supported_envs:
           - linux
           - darwin
-      - version_constraint: "true"
+      - version_constraint: semver("<= 0.67.2")
         asset: trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}
         format: tar.gz
         windows_arm_emulation: true
@@ -131,3 +131,29 @@ packages:
           - goos: windows
             format: zip
             replacements: {}
+      - version_constraint: "true"
+        asset: trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}
+        format: tar.gz
+        windows_arm_emulation: true
+        replacements:
+          amd64: 64bit
+          arm64: ARM64
+          darwin: macOS
+          linux: Linux
+        checksum:
+          type: github_release
+          asset: trivy_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+          cosign:
+            bundle:
+              type: github_release
+              asset: trivy_{{trimV .Version}}_checksums.txt.sigstore.json
+            opts:
+              - --certificate-identity
+              - https://github.com/aquasecurity/trivy/.github/workflows/reusable-release.yaml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+        overrides:
+          - goos: windows
+            format: zip
+            replacements: {}
diff --git a/registry.yaml b/registry.yaml
index 22c6186451e..3ea4a9f8bf4 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -12748,7 +12748,7 @@ packages:
         supported_envs:
           - linux
           - darwin
-      - version_constraint: "true"
+      - version_constraint: semver("<= 0.67.2")
         asset: trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}
         format: tar.gz
         windows_arm_emulation: true
@@ -12775,6 +12775,32 @@ packages:
           - goos: windows
             format: zip
             replacements: {}
+      - version_constraint: "true"
+        asset: trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}
+        format: tar.gz
+        windows_arm_emulation: true
+        replacements:
+          amd64: 64bit
+          arm64: ARM64
+          darwin: macOS
+          linux: Linux
+        checksum:
+          type: github_release
+          asset: trivy_{{trimV .Version}}_checksums.txt
+          algorithm: sha256
+          cosign:
+            bundle:
+              type: github_release
+              asset: trivy_{{trimV .Version}}_checksums.txt.sigstore.json
+            opts:
+              - --certificate-identity
+              - https://github.com/aquasecurity/trivy/.github/workflows/reusable-release.yaml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+        overrides:
+          - goos: windows
+            format: zip
+            replacements: {}
   - type: github_release
     repo_owner: arch-go
     repo_name: arch-go