grype

Fast vulnerability scanner with composite risk scoring — CVEs in images, code, SBOMs.

Quick Start

# Scan Docker image
grype nginx:latest

# Scan directory
grype dir /path/to/project

# Scan SBOM file
grype sbom:sbom.json

# Only show fixable HIGH+
grype nginx:latest --only-fixed -f high