container-grype

64

AgentSecOps

Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators. Use when: (1) Scanning container images and filesystems for known vulnerabilities, (2) Integrating vulnerability scanning into CI/CD pipelines with severity thresholds, (3) Analyzing SBOMs (Syft, SPDX, CycloneDX) for security risks, (4) Prioritizing remediation based on threat metrics (CVSS, EPSS, KEV), (5) Generating vulnerability reports in multiple formats (JSON, SARIF, CycloneDX) for security toolchain integration.

sbom-syft

64

AgentSecOps

Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects packages across 28+ ecosystems with multi-format output support (CycloneDX, SPDX, syft-json). Enables vulnerability assessment, license compliance, and supply chain security. Use when: (1) Generating SBOMs for container images or applications, (2) Analyzing software dependencies and packages for vulnerability scanning, (3) Tracking license compliance across dependencies, (4) Integrating SBOM generation into CI/CD for supply chain security, (5) Creating signed SBOM attestations for software provenance.

syft-sbom-orchestration

ciphernaut

Use for advanced SBOM tasks including attestations, format conversions, and custom cataloger selection.

grype-vulnerability-scanner

ciphernaut

Use when vulnerability scanning or SBOM generation is needed. Supports container images (Docker, Podman, OCI, Singularity), filesystems, archives, and registries. Output formats include CycloneDX, SPDX, SARIF, GitHub JSON, and Syft JSON. Works with APK, DPKG, RPM, and language ecosystems (Go, Python, JS, Java, Ruby, Rust, etc.).

sbom-generate

pitimon

Generate Software Bill of Materials using Syft. Produces CycloneDX or SPDX format SBOMs for compliance and supply chain visibility.