Grype
Vulnerability scanner for images
anchoreThird-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer
About
Grype checks container images, folders and software bills of materials (SBOMs) for known security vulnerabilities. You run it from the terminal, point it at a target, and it lists the problems it finds in operating system packages and in libraries for languages such as Python, Java, Go and Rust.
It reads Docker, OCI and Singularity images. Results can be prioritized with EPSS, KEV and a risk score, and OpenVEX statements can filter them. Scanning an existing SBOM is faster than scanning the image again. Grype is released under the Apache-2.0 license and can be installed with Homebrew.
Highlights
- Scans container images, folders and SBOMs
- Prioritizes findings with EPSS, KEV and risk score
- Filters results using OpenVEX
Who it's for
Good for developers and admins who want to check container images for known vulnerabilities before shipping.
This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.
Why it is here
- Code changed today
- New release 7 days ago
Official channels
Official channels only. We never host or repackage downloads.
