Join us

ContentUpdates and recent posts about Grype..
Discovery IconThat's all about @Grype — explore more posts below...
 Activity
@thomas-byern started using tool Visual Studio Code , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool TypeScript , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Traefik , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Svelte , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Nginx , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool GNU/Linux , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool GitHub Pages , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Gitea , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Docker , 5 hours, 52 minutes ago.
 Activity
@thomas-byern started using tool Caddy , 5 hours, 52 minutes ago.
Grype, developed by Anchore, is an open source vulnerability scanner that inspects container images, SBOMs, and filesystems for known CVEs. It supports multiple ecosystems, including Debian, Alpine, Red Hat, Python, Ruby, Go, and Java. Grype integrates with Syft for SBOM generation and provides precise, reproducible results with minimal configuration. Developers use it in CI pipelines, GitOps workflows, and security audits to enforce secure build practices and maintain supply chain visibility. Its speed, accuracy, and integration-first design make it a popular choice in DevSecOps environments.