Alternatives and similar repositories for grype:

Users that are interested in grype are comparing it to the libraries listed below

• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆6,491Updated this week
• aquasecurity / trivy
  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
  ☆24,373Updated this week
• sigstore / cosign
  Code signing and transparency for containers and binaries
  ☆4,647Updated this week
• quay / clair
  Vulnerability Static Analysis for Containers
  ☆10,452Updated this week
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆7,524Updated this week
• docker / docker-bench-security
  The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in productio…
  ☆9,226Updated 2 months ago
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,781Updated 9 months ago
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,186Updated this week
• containers / skopeo
  Work with remote images registries - retrieving information, images, signing content
  ☆8,543Updated this week
• open-policy-agent / opa
  Open Policy Agent (OPA) is an open source, general-purpose policy engine.
  ☆9,864Updated this week
• DependencyTrack / dependency-track
  Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…
  ☆2,786Updated this week
• aquasecurity / tracee
  Linux Runtime Security and Forensics using eBPF
  ☆3,700Updated this week
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,587Updated last year
• containers / buildah
  A tool that facilitates building OCI images.
  ☆7,560Updated this week
• google / osv-scanner
  Vulnerability scanner written in Go which uses the data provided by https://osv.dev
  ☆6,373Updated this week
• goodwithtech / dockle
  Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
  ☆2,821Updated last week
• GoogleContainerTools / kaniko
  Build Container Images In Kubernetes
  ☆15,094Updated this week
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,746Updated this week
• goss-org / goss
  Quick and Easy server testing/validation
  ☆5,656Updated 3 weeks ago
• kubernetes / kompose
  Convert Compose to Kubernetes
  ☆9,731Updated last week
• google / go-containerregistry
  Go library and CLIs for working with container registries
  ☆3,223Updated this week
• kubescape / kubescape
  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…
  ☆10,371Updated this week
• slimtoolkit / slim
  Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it …
  ☆20,676Updated this week
• containerd / nerdctl
  contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
  ☆8,409Updated this week
• GoogleContainerTools / distroless
  🥑 Language focused docker images, minus the operating system.
  ☆19,629Updated this week
• ossf / scorecard
  OpenSSF Scorecard - Security health metrics for Open Source
  ☆4,727Updated this week
• derailed / popeye
  👀 A Kubernetes cluster resource sanitizer
  ☆5,391Updated this week
• hashicorp / boundary
  Boundary enables identity-based access management for dynamic infrastructure.
  ☆3,880Updated this week
• getsops / sops
  Simple and flexible tool for managing secrets
  ☆17,524Updated this week