SHSelfHostIndex
GR

Grype

Vulnerability scanner for container images and filesystems

Developer Tools & Git ★ 13k stars Easy setup Apache-2.0

Grype is an open-source vulnerability scanner from Anchore for container images and filesystems. It integrates with self-hosted CI to detect known vulnerabilities in software dependencies.

Official siteSource code

Key features

  • Image and filesystem scanning
  • Multiple vulnerability databases
  • SBOM support
  • CI integration

Strengths

  • Released under the Apache-2.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 13k GitHub stars

Is Grype secure?

No known vulnerabilities affect Grype's latest release (v0.120.1). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2025-65965, published 2025-11-25 (323 days ago), fixed in 0.104.1

Source: OSV.dev, checked 2026-10-14. How this is measured.

Grype replaces

Self-hosted Snyk alternativesSelf-hosted Trivy alternatives

Health badge

Maintain Grype? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 95 · excellent

Markdown
[![SelfHostIndex health score for Grype](https://selfhostindex.com/badge/grype-vuln.svg)](https://selfhostindex.com/app/grype-vuln/)
HTML
<a href="https://selfhostindex.com/app/grype-vuln/"><img src="https://selfhostindex.com/badge/grype-vuln.svg" alt="SelfHostIndex health score for Grype"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/grype-vuln.svg
   :alt: SelfHostIndex health score for Grype
   :target: https://selfhostindex.com/app/grype-vuln/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Grype

4 head-to-head comparisons.

Similar developer tools & git apps