GR

Grype

Vulnerability scanner for container images and filesystems

Developer Tools & Git ★ 12.7k stars Easy setup Apache-2.0

Grype is an open-source vulnerability scanner from Anchore for container images and filesystems. It integrates with self-hosted CI to detect known vulnerabilities in software dependencies.

Key features

  • Image and filesystem scanning
  • Multiple vulnerability databases
  • SBOM support
  • CI integration

Strengths

  • Released under the Apache-2.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 12.7k GitHub stars

Grype replaces

Compare Grype

14 head-to-head comparisons.

Similar developer tools & git apps