Docker · Image Scanning & SBOM

Image Scanning & SBOM

• aquasecurity/trivy on GitHub, opens in a new tab

  37.4Kstars

  Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).

  Go·Apache License 2.0·active·3 hours ago

• anchore/grype on GitHub, opens in a new tab

  12.8Kstars

  A vulnerability scanner for container images, filesystems and SBOMs.

  Go·Apache License 2.0·active·3 days ago

• quay/clair on GitHub, opens in a new tab

  11Kstars

  Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers.

  Go·Apache License 2.0·active·6 days ago

• anchore/syft on GitHub, opens in a new tab

  9.4Kstars

  CLI tool and library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

  Go·Apache License 2.0·active·3 days ago

• OpenSCAP/openscap on GitHub, opens in a new tab

  1.8Kstars

  OpenSCAP provides oscap-docker tool which is used to scan Docker containers and images.

  XSLT·GNU Lesser General Public License v2.1·active·4 days ago

• docker/scout-cli on GitHub, opens in a new tab

  453stars

  Official Docker CLI for SBOM generation, vulnerability analysis, and policy evaluation.

  Shell·Other·active·4 days ago

• SongStitch/anchor on GitHub, opens in a new tab

  24stars

  A tool to ensure reproducible builds by pinning dependencies inside your Dockerfiles.

  Go·GNU General Public License v2.0·slowing·2 years ago

• sktelecom/bomlens on GitHub, opens in a new tab

  16stars

  Scan container images (plus source, binaries, and firmware) into CycloneDX SBOMs with vulnerability, license, and notice reports. Ships as a single Docker image with a web UI.

  Shell·Apache License 2.0·active·7 hours ago

• deadnews/pindock on GitHub, opens in a new tab

  3stars

  Pin and update Docker image digests in Dockerfiles and compose files.

  Go·MIT License·active·3 weeks ago