zoom_in Click to enlarge

Grype

▲ ▼

language

description Grype Overview

Grype is an open source scanner designed to analyze container images and their associated filesystems. It identifies security vulnerabilities by comparing image contents against a database of known signatures and utilizing Software Bill of Materials (SBOM) data. This tool is valuable for DevOps teams, security professionals, and anyone responsible for ensuring the integrity and security of containerized applications.

help Grype FAQ

What does Grype scan for?

Grype is an open-source vulnerability scanner from Anchore. It scans container images, filesystems, archives, and SBOMs for known CVEs and package vulnerabilities.

How is Grype related to Syft?

Syft generates SBOMs, while Grype can consume SBOM data to find vulnerabilities. Both tools are part of Anchore's open-source container security ecosystem.

Can Grype scan a Docker image directly?

Yes, a typical use is scanning an image such as alpine:latest or a built application container. It can also scan local directories when you want vulnerability results before pushing an image.

How does Grype compare with Trivy?

Both Grype and Trivy scan containers and software dependencies for vulnerabilities. Teams often compare them on database coverage, SBOM support, output formats, CI integration, and false-positive handling.

swap_horiz

Looking for Grype alternatives? Compare top competitors ranked & scored

arrow_forward