container-grype

64

AgentSecOps

Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators. Use when: (1) Scanning container images and filesystems for known vulnerabilities, (2) Integrating vulnerability scanning into CI/CD pipelines with severity thresholds, (3) Analyzing SBOMs (Syft, SPDX, CycloneDX) for security risks, (4) Prioritizing remediation based on threat metrics (CVSS, EPSS, KEV), (5) Generating vulnerability reports in multiple formats (JSON, SARIF, CycloneDX) for security toolchain integration.

slim-container-vulnerability-scanning

31

NASA-AMMOS

Implement container and dependency vulnerability scanning using Grype for automated security testing in development workflows, CI/CD pipelines, and repository maintenance. Use when setting up security scanning, adding vulnerability detection to projects, implementing pre-commit hooks for security, or scanning Docker containers and package dependencies for vulnerabilities.

container-scanning

10

BagelHole

Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations. Use when implementing container security, building secure images, or meeting compliance requirements.

scanning-container-images-with-grype

2

mukul975

Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.

securing-container-registry-images

2

mukul975

Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent deploying unscanned or unsigned images.

grype-vulnerability-scanner

ciphernaut

Use when vulnerability scanning or SBOM generation is needed. Supports container images (Docker, Podman, OCI, Singularity), filesystems, archives, and registries. Output formats include CycloneDX, SPDX, SARIF, GitHub JSON, and Syft JSON. Works with APK, DPKG, RPM, and language ecosystems (Go, Python, JS, Java, Ruby, Rust, etc.).

grype-db-management

ciphernaut

Use when managing, updating, or troubleshooting the Grype vulnerability database.

grype-vulnerability-analysis

ciphernaut

Use when deep-diving into scan results, explaining findings, or applying VEX suppression rules.

sca-scan

pitimon

Scan project dependencies for known vulnerabilities using Grype in a Docker container. Identifies CVEs in packages, libraries, and transitive dependencies.