Software Development
Grype
Grype scans container images, directories, and SBOMs for known CVEs, enabling developers to detect vulnerabilities during CI/CD pipelines. It can automatically fail builds based on severity thresholds, triage findings, and suppress false positives, while also exporting SARIF reports to GitHub Code Scanning for comprehensive security oversight. This tool benefits DevOps teams and security analysts who require precise, automated vulnerability detection and reporting.
- Publisher / source
- TerminalSkills Library
- Upstream record
- TerminalSkills/skills
- Version
- Version 4
- Published
- Publication review
- Approved for publication
- Content fingerprint
d1d71551a93c375bc158ee228ed062582c32a36fe2b84400a980f6491e77f8af