Grype Alternatives
Similar projects and alternatives to grype
-
trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
-
-
Scout APM
Scout APM: A developer's best friend. Try free for 14-days. Scout APM uses tracing logic that ties bottlenecks to source code so you know the exact line of code causing performance issues and can get back to building a great product faster.
-
anchore-engine
A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
-
kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
-
dnstake
DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover
-
sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
-
lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-
-
-
-
syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
-
-
-
conventional-changelog
Generate changelogs and release notes from a project's commit messages and metadata.
-
pyroscope
Continuous Profiling Platform! Debug performance issues down to a single line of code
-
-
checkov
Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.
-
conftest
Write tests against structured configuration data using the Open Policy Agent Rego query language
-
inspektor-gadget
Collection of gadgets for debugging and introspecting Kubernetes applications using BPF
-
documentation
Kata Containers version 1.x documentation (for version 2.x see https://github.com/kata-containers/kata-containers). (by kata-containers)
-
Reviews and mentions
-
Keep a Changelog
The approach I like to take is to curate issues and PR with semantic titles and organize them by label ("bug", "enhancement", etc) or linking PRs to an already curated issue. This way automation can use these to generate the changlog for me on each release based on closed issues and unlinked PRs since the last release.
We wrote Chronicle to do that automation for us: https://github.com/anchore/chronicle .
The nice thing about this... since you typically curate issues during the development process anyway, if you're doing that right then you get a nice looking changlog for free! We use this approach with our core tools, Syft and Grype (some changlog examples: https://github.com/anchore/syft/releases/tag/v0.31.0 and https://github.com/anchore/grype/releases/tag/v0.26.1 ).
Always happy to hear new feature ideas and possible customizations for Chronicle (put in an issue and let's chat )!
- grype: Escáner de vulnerabilidades para imágenes de contenedores y sistemas de archivos ⚡
-
Kubernetes Security Checklist 2021
All images should be checked in the application lifecycle by automated scanners (Trivy, Clair, Grype)
-
CVE Alerting Platform
Or grype for checking your Docker images:
- #grype: Escáner de vulnerabilidades para imágenes de contenedores y sistemas de archivos
Stats
anchore/grype is an open source project licensed under Apache License 2.0 which is an OSI approved license.
Popular Comparisons
Are you hiring? Post a new remote job listing for free.