ANY.RUN offers a cloud-based malware analysis sandbox and threat intelligence for examining suspicious and malicious activity.
Grype
Grype scans container images and filesystems for vulnerabilities; its repository lists container and security topics.
About Grype
Grype is a vulnerability scanner for container images, filesystems, and SBOMs. It checks OS packages such as Alpine, Debian, Ubuntu, RHEL, Oracle Linux and Amazon Linux, as well as language-specific packages including Ruby, Java, JavaScript, Python, .NET, Go, PHP and Rust, and works with Docker, OCI and Singularity image formats. It supports prioritization with EPSS, KEV and risk scoring, and OpenVEX for filtering and augmenting results.
On Linux, images in local containers-storage must be scanned with an explicit --from containers-storage flag; plain image references do not check that store.
Key features
- Scan container images, filesystems, and SBOMs for known vulnerabilities
- Support Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon Linux packages
- Support Ruby, Java, JavaScript, Python, .NET, Go, PHP, Rust packages
- Support Docker, OCI, and Singularity image formats
- Prioritize results with EPSS, KEV, and risk scoring
- Filter and augment results with OpenVEX support
Best for: People who build or maintain container images and project directories and need to find known vulnerabilities.
Good for
- Released under Apache-2.0 License
- Scans images, filesystems, and SBOMs, including piped SBOM input
- Handles Docker, OCI, and Singularity formats with OS and language packages
Watch out for
- On Linux, plain image references never check local containers-storage; explicit flag required
- Containers-storage support requires specific build tags when building from source
Grype at a glance
- Website
- github.com/anchore/grype
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Grype alternatives
Tools and sites you could use instead, ranked by how closely they match.
VirusTotal's vt-cli is a command-line interface for the service, with its repository written in Go.
Open source
This open-source Windows Forms application uploads files to VirusTotal; the project notes it is not officially supported.
Open source
Manalyze statically analyzes PE executables and collects signals that may indicate malicious behavior.
Open source
5 alternatives
A pattern-matching tool by VirusTotal for helping malware researchers identify and classify malware samples.
Open source
6 alternativesPopular in Antivirus & Malware Protection
Well-known listings from the same topic.
Microsoft Safety Scannerlearn.microsoft.com/en-us/defender-endpoint/sa…Sandboxie Plussandboxie-plus.comMalwarebytesmalwarebytes.comSandboxsandbox.pikker.eeTriagetria.geCuckoocuckoo.cert.ee
Grype FAQ
How do I scan a container image or directory?
Use grype alpine:latest for an image and grype ./my-project for a directory.
How do I scan an SBOM?
Use grype sbom:./sbom.json, or pipe it with cat ./sbom.json | grype.
How do I scan a Podman or Buildah image from local storage on Linux?
Use grype --from containers-storage localhost/myimage:latest; for rootless stores run it inside podman unshare.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.