Grype

A command-line vulnerability scanner for container images and filesystems that detects known security vulnerabilities in OS packages and language-specific dependencies.

Available Pages

Grype - Find Security Vulnerabilities Before They Bite You

Explore Grype, a powerful command-line tool for scanning Docker images, OS packages, and language dependencies to find security vulnerabilities. Understand its features and usage.

Related Technologies

Competition

trivy

Direct competitors

docker scout

Direct competitors

clair

Direct competitors

snyk container

Can replace or substitute

Integration

Integrates With

github actions

Official integration support

Integrates With

jenkins

Official integration support

Compatible With

docker

Works well together

Integrates With

kubernetes

Official integration support

Integrates With

cosign

Official integration support

Integrates With

gitlab ci

Official integration support

Dependencies

syft

Requires for operation

go

Foundation technology

sqlite

Requires for operation

anchore enterprise

Provides core functionality

stereoscope

Requires for operation

Development

vulnscan

This tool builds upon

Similar

snyk open source

Similar functionality

dependabot

Similar functionality

fossa

Similar functionality