Tag

#Grype

3 items tagged Grype.

Articles 1

DevSecOps intermediate

Scan Images and SBOMs with Grype: From 183 Findings to 3

Grype against the SBOM from part 2: 183 matches read by severity, ecosystem and fix state; two Dockerfile changes that take it to 3; exit-code behaviour for CI; and how to triage what remains.

Sep 16, 2026 11 min read

Labs 1

Lab

Generate an SBOM with Syft and Scan It with Grype

Produce CycloneDX and SPDX bills of materials for a container image without a Docker socket, scan the SBOM with Grype, gate on fixable findings only, and see why the SBOM is worth keeping after the release.

intermediate 35 minutes Syft · Grype · Docker

Tools 1

secure Vulnerability scanner

Grype

Vulnerability scanner for images, filesystems and SBOMs produced by Syft.