grype
Vulnerability scanner for container images and filesystems. tldr-pages
On several platforms
Several platforms
Scan a container image
grype image:tagIdentifyScan an image and display results in a specific format
grype image:tag --output jsonIdentifyScan an image, ignoring unfixed vulnerabilities
grype image:tag --only-fixedIdentifyScan an image and fail on vulnerabilities with a severity at or above the given level
grype image:tag --fail-on negligibleIdentifyScan a local directory and save the report to a file
grype path/to/directory --file path/to/reportIdentifyUpdate the vulnerability database
grype db updateIdentifyDisplay the current database status
grype db statusIdentifyDisplay help
grype --helpIdentify