grype
Grype is a tool that scans known vulnerabilities on container images, file systems, and SBOM files. Developed with Go language, it supports a variety of operating system packages and programming language libraries. It can prioritize risk with metrics such as EPSS and KEV and filter results with the OpenVEX format.
GR
grype
100anchore · Code Quality & Review
STARS13.1K
FORKS929
COMMITS2.4K
CONTRIBUTORS146
VERSIONv0.118.0
UPDATEDtoday
GoGüvenlik TaramasıContainerSBOMApache-2.0
Common commercial products in this category: SonarCloud, Codacy, DeepSource
What can it do?
- You can scan Konteyner images and local directories for known vulnerabilities.
- You can analyze packages and operating system dependencies from different programming languages.
- You can prioritize vulnerabilities using EPSS and risk scoring data.