Grype
A vulnerability scanner for container images, filesystems, and SBOMs to detect known security issues.
What is Grype?
Grype is a vulnerability scanner that detects known security vulnerabilities in container images, filesystem directories, and Software Bill of Materials (SBOMs). It helps identify risks in software packages and dependencies by matching them against vulnerability databases, providing actionable security insights.
Developers, DevOps engineers, and security teams who need to integrate vulnerability scanning into their CI/CD pipelines or local development workflows for containerized applications and software artifacts.
Grype offers fast, comprehensive scanning across multiple formats and ecosystems with built-in threat prioritization, making it a versatile and actionable tool for open-source security without requiring a commercial platform.
Overview
A vulnerability scanner for container images and filesystems
Use Cases
Best For
- Scanning container images for known vulnerabilities before deployment
- Integrating vulnerability checks into CI/CD pipelines for automated security
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
