GStars
    anchore

    anchore/grype

    A vulnerability scanner for container images and filesystems

    devops
    security
    container-image
    containers
    cyclonedx
    docker
    go
    Go
    Apache-2.0
    13.2K stars
    934 forks
    80 GitHub watchers
    Updated Nov 6, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest today, with 156 contributors on GitHub.

    Peaked at #39 in the weekly ranking the week of Dec 7, its best in the past year.

    Use Cases & Benefits

    • Scans container images and filesystems to detect known security vulnerabilities in operating system and language-specific packages.
    • Provides comprehensive vulnerability detection with support for multiple image formats, package types, and integration with SBOM tools like Syft.
    • Use for continuous integration pipelines to automatically detect vulnerabilities in container images before deployment.
    • Use for security auditing of local filesystem directories or container image archives to identify potential risks.
    • Use for generating detailed vulnerability reports in various formats including JSON, SARIF, and CycloneDX for compliance and remediation tracking.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    A vulnerability scanner for container images and filesystems. Easily install the binary to try it out. Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems.

    For commercial support options with Syft or Grype, please contact Anchore.

    If you encounter an issue, please let us know using the issue tracker.

    Excerpt from the anchore/grype README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 9: +3

    +487 stars over 90 days across 8 snapshot days; best day +3 on Aug 9.

    Forks

    934+80

    Open issues

    445+42

    Compared with peers in DevOps

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    View category →
    anchore/grype compared with DevOps repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    milind-soni/OpenMausBot20.6K+8.4K75today
    DuarteSantos8/openGym20.8K+1.7K757 days ago
    superplanehq/superplane9.8K+1.0K7513 days ago
    elie222/rakazo7.8K+95875today
    AstrBotDevs/AstrBot46.6K+7747510 days ago
    anchore/grype13.2K—45today
    Category median20.6K+1.0K75—
    Compare grype with OpenMausBot, openGym, superplane →

    Also by anchore

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description