Tag

#SCA

4 items tagged SCA.

Articles 2

DevSecOps intermediate

Scan Images and SBOMs with Grype: From 183 Findings to 3

Grype against the SBOM from part 2: 183 matches read by severity, ecosystem and fix state; two Dockerfile changes that take it to 3; exit-code behaviour for CI; and how to triage what remains.

Sep 16, 2026 11 min read

Security Tools beginner

Container Image Scanning with Trivy

How Trivy finds OS and application vulnerabilities, secrets and misconfigurations in container images, how to make the results actionable, and how to wire it into CI without slowing builds down.

May 12, 2026 9 min read

Tools 2

secure Vulnerability scanner

Grype

Vulnerability scanner for images, filesystems and SBOMs produced by Syft.

secure Vulnerability & misconfiguration scanner

Trivy

All-in-one scanner for container images, filesystems, IaC, Kubernetes and SBOMs.