Hacker GitHub

← All repos

anchore/grype

View on GitHub ↗ ★ 13,161 Go

A vulnerability scanner for container images and filesystems

12 mentions on Hacker News by 11 people: 2 stories, 10 comments · first 2020-12-17 · latest 2024-08-18

Mentions per year 12 mentions · busiest year 2021 (4)
20082026
AllStoriesComments NewestTopOldest
  1. …[2] https://github.com/DependencyTrack [3] https://github.com/anchore/syft [4] https://github.com/anchore/grype
    comment by h4ck_th3_pl4n3t · 2024-08-18 · in Ask HN: Pragmatic way to avoid supply chain attacks as a developer
  2. ▲ 2
    A vulnerability scanner for container images and filesystems
    story by mooreds · 2024-05-24 · 0 comments
  3. …are some nice scanners out there. Examples in no particular order: https://github.com/quay/clair https://github.com/anchore/grype/ https://github.com/eliasgranderubio/dagda/ https://github.com/aquasecurity/trivy So then you set up…
    comment by eyegor · 2024-01-28 · in I looked through attacks in my access logs
  4. ▲ 9
    Show HN: Xeol – An End Of Life (EOL) package scanner for container images
    story by noqcks · 2023-02-02 · 3 comments
  5. I was also a bit confused and expected something like grype - https://github.com/anchore/grype
    comment by pulsar256 · 2022-10-18 · in Jetstack Paranoia: A New Open-Source Tool for Container Image Security
  6. …include all the VulnDBs integrated into the OSS Anchore / Grype? https://github.com/anchore/anchore https://github.com/anchore/grype
    comment by metadat · 2022-05-21 · in Show HN: Releasing Vulnerabilities of Open Source Software
  7. …things like docker-slim[1] on your own images to get rid of those vulnerabilities you do find. [0]: https://github.com/anchore/grype [1]: https://github.com/docker-slim/docker-slim
    comment by psYchotic · 2022-01-02 · in Log4jscanner
  8. …seems like a bit of convenient self-promotion from Anchore - but the two tools grype and syft https://github.com/anchore/grype https://github.com/anchore/syft Turned out to be very helpful in easily looking through folders, installed…
    comment by e12e · 2021-12-13 · in Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide
  9. …seems like a bit of convenient self-promotion from Anchore - but the two tools grype and syft https://github.com/anchore/grype https://github.com/anchore/syft Turned out to be very helpful in easily looking through folders, installed…
    comment by e12e · 2021-12-13 · in How to detect the Log4j vulnerability in your applications
  10. …Syft and Grype (some changlog examples: https://github.com/anchore/syft/releases/tag/v0.31.0 and https://github.com/anchore/grype/releases/tag/v0.26.1 ). Always happy to hear new feature ideas and possible customizations for Chronicle (put…
    comment by wagoodman · 2021-12-04 · in Keep a Changelog
  11. Or grype for checking your Docker images: https://github.com/anchore/grype
    comment by fmajid · 2021-04-16 · in CVE Alerting Platform
  12. Anchore provides Grype https://github.com/anchore/grype
    comment by thinkmassive · 2020-12-17 · in 51% of 4M Docker images have critical vulnerabilities