Open Source Everything

Grype

13kActiveWindows · Mac · LinuxApache-2.0

Grype is a tool that scans container images, folders and software lists for known security weaknesses in the software packages they contain. It is aimed mainly at software developers and IT staff who want to check their software before release.

Features

Finds risky packages
Scans container images
Software parts lists (SBOM)Reads SBOMs; creating them is not mentioned
SourcePartly
Dashboard across projects

Screenshots

Listed in

Replaces partly

Covers known package vulnerabilities; no secret-leak or code scanning stated.

How to help

AI contributionsNot stated

The project has not said how it feels about AI-written contributions. Maintainers can set this by claiming the listing.

Something wrong?