A license scanner for container images and filesystems.
☆194Oct 30, 2026Updated this week
Alternatives and similar repositories for grant
Users that are interested in grant are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a fast changelog generator sourced from PRs and Issues☆66Updated this week
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,808Updated this week
- GitHub Action for creating software bill of materials using Syft.☆265Oct 23, 2026Updated last week
- Compare vulnerability scanners results (to make them better!)☆28Updated this week
- ☆70Oct 26, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- go library for processing container images and simulating a squash filesystem☆115Updated this week
- Manage a directory of binaries without a package manager☆57Updated this week
- ☆52Updated this week
- A vulnerability scanner for container images and filesystems☆13,154Updated this week
- Tool for using SBOMs with ClearlyDefined☆13Dec 8, 2025Updated 10 months ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆133Updated this week
- Jenkins plugin that adds Anchore container image analysis and policy evaluation to Jenkins as a build step☆30Dec 20, 2024Updated last year
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆73Updated this week
- Anchore container analysis and scan provided as a GitHub Action☆291Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore☆66Updated this week
- Utility that provides an API and CLI to identify licenses and legal terms☆56Jul 11, 2025Updated last year
- Helm charts for Anchore tools and services☆59Updated this week
- This is the GitHub repo of the OpenChain SBOM Study Group☆15Updated this week
- CPAN Security WG website☆10Updated this week
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Updated this week
- The Seiso standard python cookiecutter template☆13Updated this week
- Scan GitHub Actions Workflow logs for IOCs☆19Oct 22, 2026Updated last week
- Binary builds for dep-scan - The Dependency Scanner☆10Apr 1, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Various tools, images, etc. to support the Wolfi OSS project☆30Updated this week
- ☆20Oct 23, 2026Updated last week
- sbomasm: The Complete SBOM Management Toolkit☆133Updated this week
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆245May 26, 2025Updated last year
- A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs☆450Oct 6, 2026Updated 3 weeks ago
- A Frogger-style terminal game that visualizes container vulnerabilities discovered by Grype☆19Dec 8, 2025Updated 10 months ago
- build APKs from source code☆629Updated this week
- Scans SBOMs for vulnerabilities with Grype☆87Updated this week
- An easy way to bootstrap your application with batteries included.☆19Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆615Oct 26, 2026Updated last week
- Build OCI images from APK packages directly without Dockerfile☆1,697Updated this week
- ☆18Updated this week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆120Updated this week
- Enrich SBOMs with data from third party services☆241Sep 21, 2026Updated last month
- ☆17Updated this week
- A tool to create, transform and attest VEX metadata☆221Updated this week