grype

Grype is a vulnerability scanner designed for container images and filesystems, allowing users to detect known security issues across various OS package ecosystems and language-specific packages. Notable features include support for multiple image formats such as Docker and OCI, threat prioritization mechanisms like EPSS and KEV, and enhanced scanning capabilities through OpenVEX integration. It streamlines the vulnerability assessment process for developers and security teams by enabling quick scans of container images and SBOMs.