Tools
grype
anchore/grype
Grype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
Topics
Related projects
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
slim23.5kA container optimization toolkit that inspects application behavior to minify images by up to 30x and generate tighter security profiles.
copacetic1.7kA CLI tool that directly patches vulnerabilities in existing container images with buildkit, driven by reports from scanners such as Trivy, without full rebuilds.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
vuls12.3kAn agent-less vulnerability scanner for Linux, FreeBSD, containers and more, automatically detecting and reporting security vulnerabilities.